In the Linux kernel, the following vulnerability has been resolved:
exfat: fix missing shutdown check
xfstests generic/730 test failed because after deleting the device that still had dirty data, the file could still be read without returning an error. The reason is the missing shutdown check in ->read_iter.
I also noticed that shutdown checks were missing from ->write_iter, ->splice_read, and ->mmap. This commit adds shutdown checks to all of them.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.23-29.97Upgrade kernel-toolsUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade bpftoolUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12 | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-64kb-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-genericUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub