In the Linux kernel, the following vulnerability has been resolved:
software node: Fix software_node_get_reference_args() with index -1
The bounds check for the index passed to software_node_get_reference_args() was failing when passed UINT_MAX, this in turn would lead to an out of bound access in the property array. Fix the bound check to also cover the UINT_MAX case.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.270-271.1109Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.221-157.262Upgrade python-perf-debuginfo | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel6.18-tools-develUpgrade kernel-tools-develUpgrade kernel6.18-modules-extra-commonUpgrade kernel-livepatch-6.1.188-233.385Upgrade python3-perf-debuginfoUpgrade kernel6.18-develUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel6.18-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.18-headersUpgrade kernel-livepatch-6.18.54-121.166Upgrade kernel6.18Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf6.18-debuginfoUpgrade perf6.18Upgrade kernel-modules-extraUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-toolsUpgrade python3-perf6.18Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel6.18-debuginfo-common-aarch64Upgrade python3-perfUpgrade microvm-kernel6.18Upgrade kernelUpgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfoUpgrade bpftool6.18 | Oct 13, 2026 | Sep 17, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Sep 30, 2026 | Sep 17, 2026 |
| Redhat_linux | — | No solution exists | Oct 22, 2026 | Sep 17, 2026 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-riscvUpgrade linux-hwe-7.0Upgrade linux-oem-7.0Upgrade linux-riscv-7.0Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15 | Nov 3, 2026 | Sep 17, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 30, 2026 | Sep 17, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub