In the Linux kernel, the following vulnerability has been resolved:
md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
In clustermd, separate write-intent-bitmaps are used for each cluster node:
0 4k 8k 12k ------------------------------------------------------------------- | idle | md super | bm super [0] + bits | | bm bits[0, contd] | bm super[1] + bits | bm bits[1, contd] | | bm super[2] + bits | bm bits [2, contd] | bm super[3] + bits | | bm bits [3, contd] | | |
So in node 1, pg_index in __write_sb_page() could equal to bitmap->storage.file_pages. Then bitmap_limit will be calculated to 0. md_super_write() will be called with 0 size. That means the first 4k sb area of node 1 will never be updated through filemap_write_page(). This bug causes hang of mdadm/clustermd_tests/01r1_Grow_resize.
Here use (pg_index % bitmap->storage.file_pages) to make calculation of bitmap_limit correct.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel6.12-tools-develUpgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-headersUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extra-common | Sep 30, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-azure-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04 | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub