In the Linux kernel, the following vulnerability has been resolved:
tomoyo: don't emit warning in tomoyo_write_control()
syzbot is reporting too large allocation warning at tomoyo_write_control(), for one can write a very very long line without new line character. To fix this warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE, for practically a valid line should be always shorter than 32KB where the "too small to fail" memory-allocation rule applies.
One might try to write a valid line that is longer than 32KB, but such request will likely fail with -ENOMEM. Therefore, I feel that separately returning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant. There is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Mar 6, 2025 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-216-genericUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-nvidia | May 20, 2025 | Mar 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Mar 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub