In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: avoid off-by-one read from userspace
We try to access count + 1 byte from userspace with memdup_user(buffer, count + 1). However, the userspace only provides buffer of count bytes and only these count bytes are verified to be okay to access. To ensure the copied buffer is NUL terminated, we use memdup_user_nul instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade libperfUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade rvUpgrade kernel-64k-debug-modules | Nov 4, 2024 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 27, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade rv | Jul 29, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-azure-extra | Jul 23, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-intelUpgrade linux-image-intel-iotg | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub