In the Linux kernel, the following vulnerability has been resolved:
exfat: fix out-of-bounds access of directory entries
In the case of the directory size is greater than or equal to the cluster size, if start_clu becomes an EOF cluster(an invalid cluster) due to file system corruption, then the directory entry where ei->hint_femp.eidx hint is outside the directory, resulting in an out-of-bounds access, which may cause further file system corruption.
This commit adds a check for start_clu, if it is an invalid cluster, the file or directory will be treated as empty.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Dec 24, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Dec 24, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Dec 24, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-coreUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-modules | Feb 5, 2026 | Nov 27, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04 | Feb 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub