In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one
Sashiko notes:
> regarding the bounds check in snp_filter_reserved_mem_regions() > called via walk_iomem_res_desc(): does the check > if ((range_list->num_elements * 16 + 8) > PAGE_SIZE) > allow an off-by-one heap buffer overflow? > > If range_list->num_elements is 255, 255 * 16 + 8 = 4088, which is <= 4096. > Writing range->base (8 bytes) fills 4088-4095, but writing range->page_count > (4 bytes) would write to 4096-4099, overflowing the kzalloc-allocated > PAGE_SIZE buffer.
Fix this by accounting for the entry about to be written to, in addition to the entries that are already allocated.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Redhat_linux | — | No solution exists | Aug 24, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-awsUpgrade linux-image-azure-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-38-genericUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-azureUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-oem-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-gke-64kUpgrade linux-image-gke-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-ibmUpgrade linux-image-generic-64k-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-realtimeUpgrade linux-image-realtime-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-ibm-7.0Upgrade linux-image-azure-lts-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-realtime-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-38-realtime | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 21, 2026 | Aug 15, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub