A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_BLOCK_PROC_CALL case (via the ioctl I2C_SMBUS) with malicious input data. This flaw could allow a local user to crash the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modules-extra | Jan 26, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 24, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 24, 2023 | Sep 9, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debugUpgrade bpftool-debuginfo | Mar 12, 2024 | Sep 9, 2022 |
| Ubuntu | — | Upgrade linux-oem-5.17Upgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linuxUpgrade linux-awsUpgrade linux-gcpUpgrade linux-gke-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-realtimeUpgrade linux-oem-5.14Upgrade linux-gkeUpgrade linux-riscvUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-gcp-5.15 | Nov 19, 2024 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub