In the Linux kernel, the following vulnerability has been resolved:
ata: libata-sff: Ensure that we cannot write outside the allocated buffer
reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA command set to ATA_NOP, and protocol set to ATA_PROT_PIO, can cause ata_pio_sector() to write outside the allocated buffer, overwriting random memory.
While a ATA device is supposed to abort a ATA_NOP command, there does seem to be a bug either in libata-sff or QEMU, where either this status is not set, or the status is cleared before read by ata_sff_hsm_move(). Anyway, that is most likely a separate bug.
Looking at __atapi_pio_bytes(), it already has a safety check to ensure that __atapi_pio_bytes() cannot write outside the allocated buffer.
Add a similar check to ata_pio_sector(), such that also ata_pio_sector() cannot write outside the allocated buffer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade libperfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-extraUpgrade rtlaUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modulesUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-devel-matched | Nov 20, 2025 | Nov 11, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.129-138.220Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade libperfUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extra-matchedUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-debuginfoUpgrade rv | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-apm | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-gcp-64k-lts-24.04 | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub