In the Linux kernel, the following vulnerability has been resolved:
cdrom: rearrange last_media_change check to avoid unintentional overflow
When running syzkaller with the newly reintroduced signed integer wrap sanitizer we encounter this splat:
[ 366.015950] UBSAN: signed-integer-overflow in ../drivers/cdrom/cdrom.c:2361:33 [ 366.021089] -9223372036854775808 - 346321 cannot be represented in type '__s64' (aka 'long long') [ 366.025894] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.027502] CPU: 5 PID: 28472 Comm: syz-executor.7 Not tainted 6.8.0-rc2-00035-gb3ef86b5a957 #1 [ 366.027512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.027518] Call Trace: [ 366.027523] <TASK> [ 366.027533] dump_stack_lvl+0x93/0xd0 [ 366.027899] handle_overflow+0x171/0x1b0 [ 366.038787] ata1.00: invalid multi_count 32 ignored [ 366.043924] cdrom_ioctl+0x2c3f/0x2d10 [ 366.063932] ? __pm_runtime_resume+0xe6/0x130 [ 366.071923] sr_block_ioctl+0x15d/0x1d0 [ 366.074624] ? __pfx_sr_block_ioctl+0x10/0x10 [ 366.077642] blkdev_ioctl+0x419/0x500 [ 366.080231] ? __pfx_blkdev_ioctl+0x10/0x10 ...
Historically, the signed integer overflow sanitizer did not work in the kernel due to its interaction with `-fwrapv` but this has since been changed [1] in the newest version of Clang. It was re-enabled in the kernel with Commit 557f8c582a9ba8ab ("ubsan: Reintroduce signed overflow sanitizer").
Let's rearrange the check to not perform any arithmetic, thus not tripping the sanitizer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perfUpgrade perf | Mar 10, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt-optional | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04d | Nov 4, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub