In the Linux kernel, the following vulnerability has been resolved:
udf: Fix bogus checksum computation in udf_rename()
Syzbot reports uninitialized memory access in udf_rename() when updating checksum of '..' directory entry of a moved directory. This is indeed true as we pass on-stack diriter.fi to the udf_update_tag() and because that has only struct fileIdentDesc included in it and not the impUse or name fields, the checksumming function is going to checksum random stack contents beyond the end of the structure. This is actually harmless because the following udf_fiiter_write_fi() will recompute the checksum from on-disk buffers where everything is properly included. So all that is needed is just removing the bogus calculation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Dec 12, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-rt | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-awsUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-50-generic | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub