The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
dm array: reject an array block whose value size is not the caller's
array_block_check() can only compare the header against itself, so a block with value_size 4 and max_entries 1018 is internally consistent and passes. dm-cache keeps two arrays -- mappings at 8 bytes and hints at 4 -- and the roots for both live in the superblock. Point the mappings root at a hint block and __load_mappings() walks it through an info whose value size is 8, so element_at() strides 8 bytes over 4-byte entries and reaches offset 8160 of a 4096-byte block.
get_ablock() and __shadow_ablock() are the two places that hold the block and the caller at once. Reject there when the two value sizes disagree. Arrays only ever read their own blocks, so this fires on crafted metadata only.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.221-157.262Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.270-271.1109Upgrade python-perf | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.188-233.385Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-modules-extra | Oct 13, 2026 | Sep 11, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Sep 30, 2026 | Sep 11, 2026 |
| Redhat_linux | — | No solution exists | Sep 21, 2026 | Sep 11, 2026 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-oem-7.0Upgrade linux-lowlatency-hwe-5.15Upgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-hwe-7.0Upgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-gkeUpgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-riscvUpgrade linux-azure-fipsUpgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-gcp-fipsUpgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-fipsUpgrade linux-riscv-7.0 | Nov 3, 2026 | Sep 11, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Sep 11, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub