In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Fix sb_field_downgrade validation
- bch2_sb_downgrade_validate() wasn't checking for a downgrade entry extending past the end of the superblock section
- for_each_downgrade_entry() is used in to_text() and needs to work on malformed input; it also was missing a check for a field extending past the end of the section
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-64k-6.8 | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub