Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
jffs2: Prevent rtime decompress memory corruption
The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffer if the compressed data is corrupted. This adds the required check to prevent this failure mode.
Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
- Affected packages:
- kernel @ 5.10.0 (+19 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 11 | Planned | — |
| Debian 11 cloud | Planned | — |
| Debian 12 | Planned | — |
| Proxmox VE 7 5.15 | Released |
47 kernels
|
| Ubuntu 16.04 AWS ESM | Will Not Fix | — |
| Ubuntu 16.04 AWS HWE ESM | Will Not Fix | — |
| Ubuntu 16.04 Azure ESM | Will Not Fix | — |
| Ubuntu 16.04 ESM | Will Not Fix | — |
| Ubuntu 16.04 GCP ESM | Will Not Fix | — |
| Ubuntu 16.04 HWE ESM | Will Not Fix | — |
| Ubuntu 18.04 | Will Not Fix | — |
| Ubuntu 18.04 AWS Focal | Released |
56 kernels
|
| Ubuntu 18.04 HWE Focal | Released |
69 kernels
|
| Ubuntu 20.04 | Released |
122 kernels
|
| Ubuntu 20.04 AWS | Released |
105 kernels
|
| Ubuntu 20.04 Azure | Released |
95 kernels
|
| Ubuntu 20.04 GCP | Released |
28 kernels
|
| Ubuntu 20.04 HWE AWS | Released |
52 kernels
|
| Ubuntu 20.04 HWE Azure | Released |
36 kernels
|
| Ubuntu 22.04 | Released |
69 kernels
|
| Ubuntu 22.04 AWS | Released |
60 kernels
|
| Ubuntu 22.04 Azure | Released |
56 kernels
|
| Ubuntu 24.04 | Released |
20 kernels
|
| Ubuntu 24.04 AWS | Ready For Release | — |