In the Linux kernel, the following vulnerability has been resolved:
thermal: core: prevent potential string overflow
The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-livepatch-4.14.330-250.540Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.15.139-93.147Upgrade kernelUpgrade kernel-debuginfo-common-aarch64 | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.66-91.160Upgrade python3-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpf | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-syms | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-aws-fipsUpgrade linux-gkeop-5.15Upgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-lowlatencyUpgrade linux-fipsUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-intel-iotgUpgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-nvidia-6.5Upgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linuxUpgrade linux-azure-fdeUpgrade linux-raspi-5.4Upgrade linux-gkeUpgrade linux-realtimeUpgrade linux-awsUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-nvidia-tegraUpgrade linux-ibm-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-ibm-5.15Upgrade linux-aws-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub