In the Linux kernel, the following vulnerability has been resolved:
xfs: fix log recovery buffer allocation for the legacy h_size fixup
Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer.
Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-64k-develUpgrade kernel-uki-virtUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-docUpgrade bpftoolUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-zfcpdump | Aug 12, 2024 | Jul 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.165-110.161Upgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-devel | May 22, 2025 | Jul 5, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jul 5, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-debuginfo | Aug 22, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-sourceUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-marvell | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04d | Nov 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub