In the Linux kernel, the following vulnerability has been resolved:
virtio-blk: fix implicit overflow on virtio_max_dma_size
The following codes have an implicit conversion from size_t to u32: (u32)max_size = (size_t)virtio_max_dma_size(vdev);
This may lead overflow, Ex (size_t)4G -> (u32)0. Once virtio_max_dma_size() has a larger size than U32_MAX, use U32_MAX instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debug-modules | Aug 12, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Jul 9, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-6.1.66-91.160Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfo | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modules-extraUpgrade perf-debuginfo | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-sprd | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5Upgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-awsUpgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-azure-fde-5.15Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-oracle-5.15Upgrade linux-gkeop-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-oracle | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub