In the Linux kernel, the following vulnerability has been resolved:
udf: fix uninit-value use in udf_get_fileshortad
Check for overflow when computing alen in udf_current_aext to mitigate later uninit-value use in udf_get_fileshortad KMSAN bug[1]. After applying the patch reproducer did not trigger any issue[2].
[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df [2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.233-224.894Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.355-274.598Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.227-219.884Upgrade bpftoolUpgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-livepatch-5.15.173-118.169Upgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfo | Jan 22, 2025 | Nov 7, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 7, 2025 | Nov 7, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.112-124.190Upgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-common | Feb 17, 2025 | Nov 7, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Feb 11, 2025 | Nov 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Nov 7, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-ibmUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-generic-lpae | Feb 20, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub