In the Linux kernel, the following vulnerability has been resolved:
dm vdo: don't refer to dedupe_context after releasing it
Clear the dedupe_context pointer in a data_vio whenever ownership of the context is lost, so that vdo can't examine it accidentally.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-64k | Feb 20, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub