In the Linux kernel, the following vulnerability has been resolved:
udf: reject descriptors with oversized CRC length
udf_read_tagged() skips CRC verification when descCRCLength + sizeof(struct tag) exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC validation entirely; the descriptor is then accepted based solely on the 8-bit tag checksum, which is trivially recomputable.
Reject such descriptors instead of silently accepting them. A legitimate single-block descriptor should never have a CRC length that exceeds the block.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headers | Aug 2, 2026 | Aug 2, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.18.30-61.116Upgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.18-tools-develUpgrade perf6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extraUpgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-devel | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | No solution exists | Jul 22, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-realtime-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-gkeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-7.0Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-aws-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-awsUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-aws-7.0Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-7.0Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-7.0Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-oracle-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-7.0Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fde-lts-24.04 | Jul 21, 2026 | Jul 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub