In the Linux kernel, the following vulnerability has been resolved:
of: module: add buffer overflow check in of_modalias()
In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-docUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debug-modules | Nov 7, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.15.184-125.190 | May 30, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-libbpf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-modules-extra-common | Aug 5, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 11, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extra | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-lgUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-symsUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-docs | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-azure-fips-5.4Upgrade linux-image-azure-fips-4.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-220-generic-lpaeUpgrade linux-image-5.4.0-1108-bluefieldUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-intelUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1152-gcp-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1147-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-fipsUpgrade linux-image-5.4.0-220-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-4.15.0-2084-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-4.15.0-1191-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1132-raspiUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-fips-5.4Upgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-kvm-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-5.15Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1166-kvmUpgrade linux-image-oracle-4.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.4.0-1154-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.4.0-1152-gcpUpgrade linux-image-5.4.0-1067-xilinx-zynqmpUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1148-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-5.4.0-1095-ibmUpgrade linux-image-aws-4.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-5.4Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-aws-5.4Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-240-genericUpgrade linux-image-5.4.0-220-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-5.4Upgrade linux-image-nvidiaUpgrade linux-image-fips-5.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-azure-4.15Upgrade linux-image-virtual-5.4Upgrade linux-image-4.15.0-1138-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.4.0-1155-azure-fipsUpgrade linux-image-5.4.0-1123-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1149-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1136-kvmUpgrade linux-image-generic-5.4Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-4.15.0-2121-aws-fipsUpgrade linux-image-4.15.0-1145-oracleUpgrade linux-image-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-bluefield-5.4Upgrade linux-image-fips-5.4Upgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1183-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-snapdragon-5.4Upgrade linux-image-oracle-5.4Upgrade linux-image-gcp-5.4Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1176-gcpUpgrade linux-image-5.4.0-1053-iotUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-4.15.0-2100-azure-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-4.15.0-240-lowlatencyUpgrade linux-image-5.4.0-1149-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1088-aws-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub