In the Linux kernel, the following vulnerability has been resolved:
xfs: fix log recovery buffer allocation for the legacy h_size fixup
Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer.
Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade rtlaUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-core | Aug 12, 2024 | Jul 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | May 22, 2025 | Jul 5, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfo | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 9, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | Jul 5, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade rvUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headersUpgrade perfUpgrade kernelUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade libperf | Aug 22, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade dtb-hisilicon | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04 | Nov 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub