In the Linux kernel, the following vulnerability has been resolved:
erofs: set fileio bio failed in short read case
For file-backed mount, IO requests are handled by vfs_iocb_iter_read(). However, it can be interrupted by SIGKILL, returning the number of bytes actually copied. Unused folios in bio are unexpectedly marked as uptodate.
vfs_read filemap_read filemap_get_pages filemap_readahead erofs_fileio_readahead erofs_fileio_rq_submit vfs_iocb_iter_read filemap_read filemap_get_pages <= detect signal erofs_fileio_ki_complete <= set all folios uptodate
This patch addresses this by setting short read bio with an error directly.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-headersUpgrade python3-perf6.18Upgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-debuginfoUpgrade perf6.18Upgrade kernel-livepatch-6.18.25-52.107Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-toolsUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.18-modules-extraUpgrade kernel6.12-toolsUpgrade kernel6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.80-105.147Upgrade bpftool6.12-debuginfoUpgrade kernel6.18Upgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade perf6.18-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-develUpgrade bpftool6.18 | May 6, 2026 | Apr 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub