In the Linux kernel, the following vulnerability has been resolved:
exfat: fix the infinite loop in exfat_readdir()
If the file system is corrupted so that a cluster is linked to itself in the cluster chain, and there is an unused directory entry in the cluster, 'dentry' will not be incremented, causing condition 'dentry < max_dentries' unable to prevent an infinite loop.
This infinite loop causes s_lock not to be released, and other tasks will hang, such as exfat_sync_fs().
This commit stops traversing the cluster chain when there is unused directory entry in the cluster to avoid this infinite loop.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.234-225.895Upgrade perfUpgrade kernel-devel | Mar 14, 2025 | Jan 21, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo | Mar 27, 2025 | Jan 21, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 21, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Jan 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-intelUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1011-aws | Mar 28, 2025 | Jan 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jan 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub