In the Linux kernel, the following vulnerability has been resolved:
exfat: fix out-of-bounds access of directory entries
In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) due to file system corruption, then the directory entry where ei->hint_femp.eidx hint is outside the directory, resulting in an out-of-bounds access, which may cause further file system corruption.
This commit adds a check for start_clu, if it is an invalid cluster, the file or directory will be treated as empty.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Dec 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Dec 24, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Dec 24, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade rtlaUpgrade libperfUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-modules-extra-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-uki-virtUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matched | Feb 5, 2026 | Nov 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-58-generic-64k | Feb 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub