In the Linux kernel, the following vulnerability has been resolved:
ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency | Dec 18, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jul 29, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub