In the Linux kernel, the following vulnerability has been resolved:
scsi: qedi: Fix crash while reading debugfs attribute
The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash.
To fix this issue, use a small local stack buffer for sprintf() and then call simple_read_from_buffer(), which in turns make the copy_to_user() call.
BUG: unable to handle page fault for address: 00007f4801111000 PGD 8000000864df6067 P4D 8000000864df6067 PUD 864df7067 PMD 846028067 PTE 0 Oops: 0002 [#1] PREEMPT SMP PTI Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 06/15/2023 RIP: 0010:memcpy_orig+0xcd/0x130 RSP: 0018:ffffb7a18c3ffc40 EFLAGS: 00010202 RAX: 00007f4801111000 RBX: 00007f4801111000 RCX: 000000000000000f RDX: 000000000000000f RSI: ffffffffc0bfd7a0 RDI: 00007f4801111000 RBP: ffffffffc0bfd7a0 R08: 725f746f6e5f6f64 R09: 3d7265766f636572 R10: ffffb7a18c3ffd08 R11: 0000000000000000 R12: 00007f4881110fff R13: 000000007fffffff R14: ffffb7a18c3ffca0 R15: ffffffffc0bfd7af FS: 00007f480118a740(0000) GS:ffff98e38af00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4801111000 CR3: 0000000864b8e001 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? page_fault_oops+0x183/0x510 ? exc_page_fault+0x69/0x150 ? asm_exc_page_fault+0x22/0x30 ? memcpy_orig+0xcd/0x130 vsnprintf+0x102/0x4c0 sprintf+0x51/0x80 qedi_dbg_do_not_recover_cmd_read+0x2f/0x50 [qedi 6bcfdeeecdea037da47069eca2ba717c84a77324] full_proxy_read+0x50/0x80 vfs_read+0xa5/0x2e0 ? folio_add_new_anon_rmap+0x44/0xa0 ? set_pte_at+0x15/0x30 ? do_pte_missing+0x426/0x7f0 ksys_read+0xa5/0xe0 do_syscall_64+0x58/0x80 ? __count_memcg_events+0x46/0x90 ? count_memcg_event_mm+0x3d/0x60 ? handle_mm_fault+0x196/0x2f0 ? do_user_addr_fault+0x267/0x890 ? exc_page_fault+0x69/0x150 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f4800f20b4d
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rtlaUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-64k-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-coreUpgrade bpftoolUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-extra | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-5.10.223-211.872Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-devel | May 22, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 6, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-modules-extra | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-macrosUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dtb-appleUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade kselftests-kmp-rt | Aug 15, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-intelUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1099-gkeop | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub