In the Linux kernel, the following vulnerability has been resolved:
xfs: fix log recovery buffer allocation for the legacy h_size fixup
Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer.
Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-64kUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-coreUpgrade bpftoolUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-debug-devel | Aug 12, 2024 | Jul 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | May 22, 2025 | Jul 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-common | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | Jul 5, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernelUpgrade libperf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-core | Aug 22, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dtb-apmUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-amdUpgrade ocfs2-kmp-default | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-hwe-24.04 | Nov 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub