In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix panic in failed foilio allocation
commit 7e119cff9d0a ("ocfs2: convert w_pages to w_folios") and commit 9a5e08652dc4b ("ocfs2: use an array of folios instead of an array of pages") save -ENOMEM in the folio array upon allocation failure and call the folio array free code.
The folio array free code expects either valid folio pointers or NULL. Finding the -ENOMEM will result in a panic. Fix by NULLing the error folio entry.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-hwe-24.04 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub