In the Linux kernel, the following vulnerability has been resolved:
block: initialize integrity buffer to zero before writing it to media
Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory.
Fix this by adding the __GFP_ZERO flag to allocations for writes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k | Nov 4, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.355-271.569Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-tools-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.106-116.188Upgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade libperf-debuginfoUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-core | Nov 19, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azure | Dec 5, 2025 | Dec 12, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-4.15.0-231-genericUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-intelUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-hwe-16.04 | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub