In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade python3-perfUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.262-200.489Upgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perf | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libs | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-manUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azure | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-ibm | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub