In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
Observed on kernel 6.6 (present on master as well):
BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190 __asan_loadN+0x1c/0x28 memcmp+0x98/0xd0 efivarfs_d_compare+0x68/0xd8 __d_lookup_rcu_op_compare+0x178/0x218 __d_lookup_rcu+0x1f8/0x228 d_alloc_parallel+0x150/0x648 lookup_open.isra.0+0x5f0/0x8d0 open_last_lookups+0x264/0x828 path_openat+0x130/0x3f8 do_filp_open+0x114/0x248 do_sys_openat2+0x340/0x3c0 __arm64_sys_openat+0x120/0x1a0
If dentry->d_name.len < EFI_VARIABLE_GUID_LEN , 'guid' can become negative, leadings to oob. The issue can be triggered by parallel lookups using invalid filename:
T1 T2 lookup_open ->lookup simple_lookup d_add // invalid dentry is added to hash list
lookup_open d_alloc_parallel __d_lookup_rcu __d_lookup_rcu_op_compare hlist_bl_for_each_entry_rcu // invalid dentry can be retrieved ->d_compare efivarfs_d_compare // oob
Fix it by checking 'guid' before cmp.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64kUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-rtUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-debug-modules-extra | Oct 23, 2025 | Oct 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.15.191-132.213 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf6.12Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12Upgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftool6.12Upgrade python3-perf | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 14, 2025 | Sep 16, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 21, 2025 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade libperf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade rvUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-devel | Feb 5, 2026 | Nov 2, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegraUpgrade linux-image-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classic | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub