In the Linux kernel, the following vulnerability has been resolved:
cdrom: rearrange last_media_change check to avoid unintentional overflow
When running syzkaller with the newly reintroduced signed integer wrap sanitizer we encounter this splat:
[ 366.015950] UBSAN: signed-integer-overflow in ../drivers/cdrom/cdrom.c:2361:33 [ 366.021089] -9223372036854775808 - 346321 cannot be represented in type '__s64' (aka 'long long') [ 366.025894] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.027502] CPU: 5 PID: 28472 Comm: syz-executor.7 Not tainted 6.8.0-rc2-00035-gb3ef86b5a957 #1 [ 366.027512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.027518] Call Trace: [ 366.027523] <TASK> [ 366.027533] dump_stack_lvl+0x93/0xd0 [ 366.027899] handle_overflow+0x171/0x1b0 [ 366.038787] ata1.00: invalid multi_count 32 ignored [ 366.043924] cdrom_ioctl+0x2c3f/0x2d10 [ 366.063932] ? __pm_runtime_resume+0xe6/0x130 [ 366.071923] sr_block_ioctl+0x15d/0x1d0 [ 366.074624] ? __pfx_sr_block_ioctl+0x10/0x10 [ 366.077642] blkdev_ioctl+0x419/0x500 [ 366.080231] ? __pfx_blkdev_ioctl+0x10/0x10 ...
Historically, the signed integer overflow sanitizer did not work in the kernel due to its interaction with `-fwrapv` but this has since been changed [1] in the newest version of Clang. It was re-enabled in the kernel with Commit 557f8c582a9ba8ab ("ubsan: Reintroduce signed overflow sanitizer").
Let's rearrange the check to not perform any arithmetic, thus not tripping the sanitizer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.102-108.177Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | Mar 10, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-azure-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04 | Nov 4, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub