In the Linux kernel, the following vulnerability has been resolved:
ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-azure | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-intelUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-oem | Dec 18, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub