In the Linux kernel, the following vulnerability has been resolved:
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extra | Aug 12, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 28, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Apr 28, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-modules-extra | Aug 22, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade cluster-md-kmp-default | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-gkeUpgrade linuxUpgrade linux-azure-fdeUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-gkeop-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-azure | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub