In the Linux kernel, the following vulnerability has been resolved:
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
In
riocm_cdev_ioctl(RIO_CM_CHAN_SEND) -> cm_chan_msg_send() -> riocm_ch_send()
cm_chan_msg_send() checks that userspace didn't send too much data but riocm_ch_send() failed to check that userspace sent sufficient data. The result is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr which were outside the bounds of the space which cm_chan_msg_send() allocated.
Address this by teaching riocm_ch_send() to check that the entire rio_ch_chan_hdr was copied in from userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 1, 2025 | Jul 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jun 30, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-amlogicUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intelUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-xilinxUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azureUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.14 | Jul 2, 2025 | Jun 30, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jun 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub