In the Linux kernel, the following vulnerability has been resolved:
fou: fix initialization of grc
The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel | Nov 4, 2024 | Sep 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.111-120.187Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-kvmsmall | Dec 5, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-awsUpgrade linux-image-5.15.0-127-generic-64k | Dec 18, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub