In the Linux kernel, the following vulnerability has been resolved:
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
In
riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send()
cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated.
Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 1, 2025 | Jul 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jun 30, 2025 |
| Suse | — | Upgrade dtb-armUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-symsUpgrade dtb-marvellUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-macros | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-genericUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-gke-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-gke-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04 | Jul 2, 2025 | Jun 30, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jun 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub