In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade libperfUpgrade perfUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade bpftoolUpgrade kernel-debug-core | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headers | May 8, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-devel-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oemUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub