In the Linux kernel, the following vulnerability has been resolved:
block: initialize integrity buffer to zero before writing it to media
Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory.
Fix this by adding the __GFP_ZERO flag to allocations for writes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernelUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-tools | Nov 4, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-4.14.355-271.569Upgrade kernel-tools-develUpgrade python-perfUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.106-116.188Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-devel | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade libperfUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade rtlaUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade perfUpgrade kernel-debug-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug | Nov 19, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-azure-baseUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-amlogic | Dec 5, 2025 | Dec 12, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmp | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub