In the Linux kernel, the following vulnerability has been resolved:
block: initialize integrity buffer to zero before writing it to media
Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory.
Fix this by adding the __GFP_ZERO flag to allocations for writes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade bpftool | Nov 4, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.165-110.161Upgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-4.14.355-271.569Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.106-116.188Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-toolsUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade perf | Nov 19, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Dec 12, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.4.0-266-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-125-generic | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub