In the Linux kernel, the following vulnerability has been resolved:
cdrom: rearrange last_media_change check to avoid unintentional overflow
When running syzkaller with the newly reintroduced signed integer wrap sanitizer we encounter this splat:
[ 366.015950] UBSAN: signed-integer-overflow in ../drivers/cdrom/cdrom.c:2361:33 [ 366.021089] -9223372036854775808 - 346321 cannot be represented in type '__s64' (aka 'long long') [ 366.025894] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.027502] CPU: 5 PID: 28472 Comm: syz-executor.7 Not tainted 6.8.0-rc2-00035-gb3ef86b5a957 #1 [ 366.027512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.027518] Call Trace: [ 366.027523] <TASK> [ 366.027533] dump_stack_lvl+0x93/0xd0 [ 366.027899] handle_overflow+0x171/0x1b0 [ 366.038787] ata1.00: invalid multi_count 32 ignored [ 366.043924] cdrom_ioctl+0x2c3f/0x2d10 [ 366.063932] ? __pm_runtime_resume+0xe6/0x130 [ 366.071923] sr_block_ioctl+0x15d/0x1d0 [ 366.074624] ? __pfx_sr_block_ioctl+0x10/0x10 [ 366.077642] blkdev_ioctl+0x419/0x500 [ 366.080231] ? __pfx_blkdev_ioctl+0x10/0x10 ...
Historically, the signed integer overflow sanitizer did not work in the kernel due to its interaction with `-fwrapv` but this has since been changed [1] in the newest version of Clang. It was re-enabled in the kernel with Commit 557f8c582a9ba8ab ("ubsan: Reintroduce signed overflow sanitizer").
Let's rearrange the check to not perform any arithmetic, thus not tripping the sanitizer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python3-perf | Mar 10, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-macros | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-virtual-hwe-24.04 | Nov 4, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub