In the Linux kernel, the following vulnerability has been resolved:
ntfs3: add buffer boundary checks to run_unpack()
run_unpack() checks `run_buf < run_last` at the top of the while loop but then reads size_size and offset_size bytes via run_unpack_s64() without verifying they fit within the remaining buffer. A crafted NTFS image with truncated run data in an MFT attribute triggers an OOB heap read of up to 15 bytes when the filesystem is mounted.
Add boundary checks before each run_unpack_s64() call to ensure the declared field size does not exceed the remaining buffer.
Found by fuzzing with a source-patched harness (LibAFL + QEMU).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-debuginfo | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade perf6.18-debuginfoUpgrade kernel6.18-toolsUpgrade python3-perf6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel-livepatch-6.18.30-61.116Upgrade perf6.18Upgrade kernel6.18-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-modules-extra | Jul 8, 2026 | May 27, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oem-26.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-realtime-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-oracle-7.0Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-24.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-7.0Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-azure-fipsUpgrade linux-image-azure-7.0Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1008-oemUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-7.0Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-7.0Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-5.15Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-azure-fde-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-realtime-7.0Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-ibm-7.0Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-5.15 | Jul 1, 2026 | May 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 27, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub