In the Linux kernel, the following vulnerability has been resolved:
X.509: Fix out-of-bounds access when parsing extensions
Leo reports an out-of-bounds access when parsing a certificate with empty Basic Constraints or Key Usage extension because the first byte of the extension is read before checking its length. Fix it.
The bug can be triggered by an unprivileged user by submitting a specially crafted certificate to the kernel through the keyrings(7) API. Leo has demonstrated this with a proof-of-concept program responsibly disclosed off-list.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.18.25-55.108Upgrade perf6.12Upgrade kernel6.18-modules-extra-commonUpgrade perf6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel6.12Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade python3-perf6.18Upgrade kernel6.12-tools-debuginfoUpgrade bpftool6.12Upgrade kernel6.18-modules-extraUpgrade kernel-livepatch-6.12.83-113.160Upgrade kernel6.18Upgrade kernel6.12-develUpgrade kernel6.18-headersUpgrade perf6.18Upgrade kernel6.12-tools-develUpgrade python3-perf6.18-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-tools-debuginfo | May 19, 2026 | Apr 20, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 20, 2026 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx | May 25, 2026 | Apr 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | Apr 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub