In the Linux kernel, the following vulnerability has been resolved:
block: fix adding folio to bio
>4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bio_add_folio_nofail() and IO failure.
Fix it by adjusting 'page' & trimming 'offset' so that `->bi_offset` won't be overflow, and folio can be added to bio successfully.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel6.12Upgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-libbpf | Jul 11, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-azure-vdso | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-genericUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracle-64k | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub