In the Linux kernel, the following vulnerability has been resolved:
of: fdt: fix off-by-one error in unflatten_dt_nodes()
Commit 78c44d910d3e ("drivers/of: Fix depth when unflattening devicetree") forgot to fix up the depth check in the loop body in unflatten_dt_nodes() which makes it possible to overflow the nps[] buffer...
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-headersUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.73-48.135Upgrade perf | Aug 19, 2024 | May 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 3, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-default-devel | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-iotUpgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gkeUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-realtimeUpgrade linux-azure-5.15Upgrade linux-hweUpgrade linux-azure-fdeUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-gcp-4.15Upgrade linux-aws-hweUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-gkeop-5.15Upgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-5.4Upgrade linux-aws-fips | Nov 19, 2024 | May 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub