In the Linux kernel, the following vulnerability has been resolved:
bcachefs: Fix sb_field_downgrade validation
- bch2_sb_downgrade_validate() wasn't checking for a downgrade entry extending past the end of the superblock section
- for_each_downgrade_entry() is used in to_text() and needs to work on malformed input; it also was missing a check for a field extending past the end of the section
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04 | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub