In the Linux kernel, the following vulnerability has been resolved:
landlock: Fix d_parent walk
The WARN_ON_ONCE() in collect_domain_accesses() can be triggered when trying to link a root mount point. This cannot work in practice because this directory is mounted, but the VFS check is done after the call to security_path_link().
Do not use source directory's d_parent when the source directory is the mount point.
[mic: Fix commit message]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dtb-exynosUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amd | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub