In the Linux kernel, the following vulnerability has been resolved:
md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
After commit ec6bb299c7c3 ("md/md-bitmap: add 'sync_size' into struct md_bitmap_stats"), following panic is reported:
Oops: general protection fault, probably for non-canonical address RIP: 0010:bitmap_get_stats+0x2b/0xa0 Call Trace: <TASK> md_seq_show+0x2d2/0x5b0 seq_read_iter+0x2b9/0x470 seq_read+0x12f/0x180 proc_reg_read+0x57/0xb0 vfs_read+0xf6/0x380 ksys_read+0x6c/0xf0 do_syscall_64+0x82/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Root cause is that bitmap_get_stats() can be called at anytime if mddev is still there, even if bitmap is destroyed, or not fully initialized. Deferenceing bitmap in this case can crash the kernel. Meanwhile, the above commit start to deferencing bitmap->storage, make the problem easier to trigger.
Fix the problem by protecting bitmap_get_stats() with bitmap_info.mutex.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64 | Oct 16, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-kvmsmall | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-azure-fde-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-awsUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intelUpgrade linux-image-azure-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub