In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
Syzbot reported that when searching for records in a directory where the inode's i_size is corrupted and has a large value, memory access outside the folio/page range may occur, or a use-after-free bug may be detected if KASAN is enabled.
This is because nilfs_last_byte(), which is called by nilfs_find_entry() and others to calculate the number of valid bytes of directory data in a page from i_size and the page index, loses the upper 32 bits of the 64-bit size information due to an inappropriate type of local variable to which the i_size value is assigned.
This caused a large byte offset value due to underflow in the end address calculation in the calling nilfs_find_entry(), resulting in memory access that exceeds the folio/page size.
Fix this issue by changing the type of the local variable causing the bit loss from "unsigned int" to "u64". The return value of nilfs_last_byte() is also of type "unsigned int", but it is truncated so as not to exceed PAGE_SIZE and no bit loss occurs, so no change is required.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.233-223.887Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool | Mar 14, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 22, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-fipsUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-snapdragon-hwe-18.04 | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub