In the Linux kernel, the following vulnerability has been resolved:
ocfs2: add bounds checking to ocfs2_xattr_find_entry()
Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 14, 2024 | Oct 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-azure-nvidiaUpgrade linux-image-intelUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-virtual-hwe-18.04 | Dec 18, 2024 | Oct 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Oct 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub