The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
dm-integrity: replace forgeable discard filler with a keyed sector marker
The discard-block check in dm_integrity_rw_tag() treats a stored tag of all 0xf6 bytes (DISCARD_FILLER) as proof a block was discarded and skips HMAC verification. allow_discards is only accepted in dm-integrity's standalone mode. An attacker with raw write access to the backing device, but without the integrity key, can stamp any block with an all-0xf6 tag and have it served as authentic.
Add a new "allow_discards_keyed" target argument that marks discarded blocks with a keyed checksum of (salt || sector) instead, computed by integrity_discard_checksum().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-modules-extraUpgrade kernel6.18-headersUpgrade bpftool6.18Upgrade microvm-kernel6.18Upgrade perf6.18Upgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-toolsUpgrade python3-perf6.18Upgrade kernel-livepatch-6.18.54-121.166Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade kernel6.18-tools-debuginfo | Oct 13, 2026 | Sep 17, 2026 |
| Debian | — | Upgrade linux | Nov 3, 2026 | Sep 17, 2026 |
| Redhat_linux | — | No solution exists | Oct 5, 2026 | Sep 17, 2026 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-riscvUpgrade linux-awsUpgrade linux-oem-7.0Upgrade linux-riscv-7.0Upgrade linuxUpgrade linux-hwe-7.0 | Nov 3, 2026 | Sep 17, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Nov 4, 2026 | Sep 17, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub