In the Linux kernel, the following vulnerability has been resolved:
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
pefile_digest_pe_contents() computes the trailing-data hash length as pelen - (hashed_bytes + certs_size). A crafted PE can make the addition exceed pelen, causing the unsigned subtraction to underflow to ~4 GiB. This is passed to crypto_shash_update() which reads out of bounds and panics on unmapped vmalloc guard pages.
BUG: unable to handle page fault for address: ffffc900038d8000 Oops: Oops: 0000 [#1] SMP KASAN NOPTI RIP: 0010:sha256_blocks_generic (lib/crypto/sha256.c:152) Call Trace: <TASK> __sha256_update (lib/crypto/sha256.c:208) crypto_sha256_update (crypto/sha256.c:142) verify_pefile_signature (crypto/asymmetric_keys/verify_pefile.c:436) kexec_kernel_verify_pe_sig (kernel/kexec_file.c:151) __do_sys_kexec_file_load (kernel/kexec_file.c:406) do_syscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) </TASK> Kernel panic - not syncing: Fatal exception
Validate that the addition does not overflow and the result does not exceed pelen before the subtraction. Return -ELIBBAD on failure.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel-livepatch-6.12.100-125.179Upgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.180-225.360Upgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-debuginfoUpgrade perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel-modules-extra-commonUpgrade bpftool6.12-debuginfo | Aug 18, 2026 | Jul 27, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux-6.1Upgrade linux | Aug 2, 2026 | Aug 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 30, 2026 | Jul 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 14, 2026 | Jul 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub