In the Linux kernel, the following vulnerability has been resolved:
block: initialize integrity buffer to zero before writing it to media
Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory.
Fix this by adding the __GFP_ZERO flag to allocations for writes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-coreUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64kUpgrade kernel-64k-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-64k-modules-extraUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-core | Nov 4, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.355-271.569Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade libperfUpgrade kernel-rt-debug-coreUpgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-core | Nov 19, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-64kbUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-default | Dec 5, 2025 | Dec 12, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-intelUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-231-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1137-oracle | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub