In the Linux kernel, the following vulnerability has been resolved:
ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-rt-develUpgrade dtb-appleUpgrade dtb-sprdUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-azure-baseUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-source-rt | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-intelUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-54-lowlatency-64k | Dec 18, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub