In the Linux kernel, the following vulnerability has been resolved:
safesetid: check size of policy writes
syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc.
Check the size specified for write buffers before allocating.
[PM: subject tweak]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfo | May 22, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-awsUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-realtime | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub