In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
Observed on kernel 6.6 (present on master as well):
BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190 __asan_loadN+0x1c/0x28 memcmp+0x98/0xd0 efivarfs_d_compare+0x68/0xd8 __d_lookup_rcu_op_compare+0x178/0x218 __d_lookup_rcu+0x1f8/0x228 d_alloc_parallel+0x150/0x648 lookup_open.isra.0+0x5f0/0x8d0 open_last_lookups+0x264/0x828 path_openat+0x130/0x3f8 do_filp_open+0x114/0x248 do_sys_openat2+0x340/0x3c0 __arm64_sys_openat+0x120/0x1a0
If dentry->d_name.len < EFI_VARIABLE_GUID_LEN , 'guid' can become negative, leadings to oob. The issue can be triggered by parallel lookups using invalid filename:
T1 T2 lookup_open ->lookup simple_lookup d_add // invalid dentry is added to hash list
lookup_open d_alloc_parallel __d_lookup_rcu __d_lookup_rcu_op_compare hlist_bl_for_each_entry_rcu // invalid dentry can be retrieved ->d_compare efivarfs_d_compare // oob
Fix it by checking 'guid' before cmp.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64kUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernelUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-core | Oct 23, 2025 | Oct 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.191-132.213Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.242-239.961Upgrade python-perfUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-headersUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfoUpgrade python3-perf6.12Upgrade kernel-headersUpgrade bpftool6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-tools-develUpgrade perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade bpftool6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpf-static | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 14, 2025 | Sep 16, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Oct 21, 2025 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-core | Feb 5, 2026 | Nov 2, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-azure-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-kvm | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub