In the Linux kernel, the following vulnerability has been resolved:
exfat: fix out-of-bounds access of directory entries
In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) due to file system corruption, then the directory entry where ei->hint_femp.eidx hint is outside the directory, resulting in an out-of-bounds access, which may cause further file system corruption.
This commit adds a check for start_clu, if it is an invalid cluster, the file or directory will be treated as empty.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Dec 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Dec 24, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Dec 24, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade libperfUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-debug-devel | Feb 5, 2026 | Nov 27, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency | Feb 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub