In the Linux kernel, the following vulnerability has been resolved:
hfs: fix slab-out-of-bounds in hfs_bnode_read()
This patch introduces is_bnode_offset_valid() method that checks the requested offset value. Also, it introduces check_and_correct_requested_length() method that checks and correct the requested length (if it is necessary). These methods are used in hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(), hfs_bnode_copy(), and hfs_bnode_move() with the goal to prevent the access out of allocated memory and triggering the crash.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-aws-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-intelUpgrade linux-image-aws-64kUpgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidiaUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-6.8Upgrade linux-image-genericUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gkeUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvm | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub