In the Linux kernel, the following vulnerability has been resolved:
fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
The "arg->vec_len" variable is a u64 that comes from the user at the start of the function. The "arg->vec_len * sizeof(struct page_region))" multiplication can lead to integer wrapping. Use size_mul() to avoid that.
Also the size_add/mul() functions work on unsigned long so for 32bit systems we need to ensure that "arg->vec_len" fits in an unsigned long.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 2, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-64k | Feb 20, 2025 | Dec 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub