In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
Observed on kernel 6.6 (present on master as well):
BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190 __asan_loadN+0x1c/0x28 memcmp+0x98/0xd0 efivarfs_d_compare+0x68/0xd8 __d_lookup_rcu_op_compare+0x178/0x218 __d_lookup_rcu+0x1f8/0x228 d_alloc_parallel+0x150/0x648 lookup_open.isra.0+0x5f0/0x8d0 open_last_lookups+0x264/0x828 path_openat+0x130/0x3f8 do_filp_open+0x114/0x248 do_sys_openat2+0x340/0x3c0 __arm64_sys_openat+0x120/0x1a0
If dentry->d_name.len < EFI_VARIABLE_GUID_LEN , 'guid' can become negative, leadings to oob. The issue can be triggered by parallel lookups using invalid filename:
T1 T2 lookup_open ->lookup simple_lookup d_add // invalid dentry is added to hash list
lookup_open d_alloc_parallel __d_lookup_rcu __d_lookup_rcu_op_compare hlist_bl_for_each_entry_rcu // invalid dentry can be retrieved ->d_compare efivarfs_d_compare // oob
Fix it by checking 'guid' before cmp.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-rt-64k-develUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade rvUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-64kUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virt | Oct 23, 2025 | Oct 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.191-132.213Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools-develUpgrade python3-perf-debuginfoUpgrade perf6.12Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf6.12Upgrade bpftoolUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel6.12-headersUpgrade perf-debuginfoUpgrade bpftool6.12Upgrade kernel-tools-develUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernelUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpf-staticUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade python3-perf | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 14, 2025 | Sep 16, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 21, 2025 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade rtlaUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade libperf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade bpftoolUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extra | Feb 5, 2026 | Nov 2, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-generic-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-azureUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-nvidia-64k-6.8 | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub