In the Linux kernel, the following vulnerability has been resolved:
fou: fix initialization of grc
The grc must be initialize first. There can be a condition where if fou is NULL, goto out will be executed and grc would be used uninitialized.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-headers | Nov 4, 2024 | Sep 27, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.111-120.187Upgrade perfUpgrade python3-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-modules-extra | Feb 17, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-default | Dec 5, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04 | Dec 18, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub