In the Linux kernel, the following vulnerability has been resolved:
md/md-bitmap: fix GPF in bitmap_get_stats()
The commit message of commit 6ec1f0239485 ("md/md-bitmap: fix stats collection for external bitmaps") states:
Remove the external bitmap check as the statistics should be available regardless of bitmap storage location.
Return -EINVAL only for invalid bitmap with no storage (neither in superblock nor in external file).
But, the code does not adhere to the above, as it does only check for a valid super-block for "internal" bitmaps. Hence, we observe:
Oops: GPF, probably for non-canonical address 0x1cd66f1f40000028 RIP: 0010:bitmap_get_stats+0x45/0xd0 Call Trace:
seq_read_iter+0x2b9/0x46a seq_read+0x12f/0x180 proc_reg_read+0x57/0xb0 vfs_read+0xf6/0x380 ksys_read+0x6d/0xf0 do_syscall_64+0x8c/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
We fix this by checking the existence of a super-block for both the internal and external case.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel6.12-toolsUpgrade kernelUpgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade python3-perf6.12Upgrade kernel6.12-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perfUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.147-172.266Upgrade perf-debuginfoUpgrade kernel6.12Upgrade kernel-toolsUpgrade kernel6.12-libbpf-develUpgrade perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-headersUpgrade perfUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfo | Oct 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-rt-devel | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-6.14Upgrade linux-image-virtualUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-oracleUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-genericUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-aws-64k-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-24.04a | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub