In the Linux kernel, the following vulnerability has been resolved:
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int".
So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1026-oem | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub