In the Linux kernel, the following vulnerability has been resolved:
block: initialize integrity buffer to zero before writing it to media
Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory.
Fix this by adding the __GFP_ZERO flag to allocations for writes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-tools-libsUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-uki-virtUpgrade libperf | Nov 4, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-271.569Upgrade perf-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.165-110.161 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.106-116.188Upgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade bpftool-debuginfo | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade libperf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-devel | Nov 19, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kernel-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-xilinx | Dec 5, 2025 | Dec 12, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-classicUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-oemUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-125-generic | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub