In the Linux kernel, the following vulnerability has been resolved:
safesetid: check size of policy writes
syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc.
Check the size specified for write buffers before allocating.
[PM: subject tweak]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfo | May 22, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-libbpf | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegra-rt | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub