In the Linux kernel, the following vulnerability has been resolved:
cdrom: rearrange last_media_change check to avoid unintentional overflow
When running syzkaller with the newly reintroduced signed integer wrap sanitizer we encounter this splat:
[ 366.015950] UBSAN: signed-integer-overflow in ../drivers/cdrom/cdrom.c:2361:33 [ 366.021089] -9223372036854775808 - 346321 cannot be represented in type '__s64' (aka 'long long') [ 366.025894] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.027502] CPU: 5 PID: 28472 Comm: syz-executor.7 Not tainted 6.8.0-rc2-00035-gb3ef86b5a957 #1 [ 366.027512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.027518] Call Trace: [ 366.027523] <TASK> [ 366.027533] dump_stack_lvl+0x93/0xd0 [ 366.027899] handle_overflow+0x171/0x1b0 [ 366.038787] ata1.00: invalid multi_count 32 ignored [ 366.043924] cdrom_ioctl+0x2c3f/0x2d10 [ 366.063932] ? __pm_runtime_resume+0xe6/0x130 [ 366.071923] sr_block_ioctl+0x15d/0x1d0 [ 366.074624] ? __pfx_sr_block_ioctl+0x10/0x10 [ 366.077642] blkdev_ioctl+0x419/0x500 [ 366.080231] ? __pfx_blkdev_ioctl+0x10/0x10 ...
Historically, the signed integer overflow sanitizer did not work in the kernel due to its interaction with `-fwrapv` but this has since been changed [1] in the newest version of Clang. It was re-enabled in the kernel with Commit 557f8c582a9ba8ab ("ubsan: Reintroduce signed overflow sanitizer").
Let's rearrange the check to not perform any arithmetic, thus not tripping the sanitizer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfo | Mar 10, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade dtb-lgUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04 | Nov 4, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub