In the Linux kernel, the following vulnerability has been resolved:
udf: reject descriptors with oversized CRC length
udf_read_tagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable.
Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-devel | Aug 2, 2026 | Aug 2, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade kernel6.18-develUpgrade perf6.18-debuginfoUpgrade perf6.18Upgrade kernel-livepatch-6.18.30-61.116Upgrade kernel6.18-tools-debuginfoUpgrade python3-perf6.18Upgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-devel | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | No solution exists | Jul 22, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-7.0Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-ibm-7.0Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-fips-5.15Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-azure-fde-7.0Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-gcp-7.0Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-7.0Upgrade linux-image-awsUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-azure-5.15Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-5.15Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-lowlatency-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04 | Jul 21, 2026 | Jul 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub