copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.336-257.562Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.210-201.852Upgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.149-99.161 | Mar 6, 2024 | Jan 23, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 26, 2024 | Jan 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 1, 2024 | Jan 23, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-ec2Upgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-trace-develUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-ec2-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-xenUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-traceUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-xen-develUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-ec2-baseUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-xen-baseUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-trace-baseUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade cluster-md-kmp-64kb | Mar 13, 2024 | Jan 23, 2024 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-4.4.0-253-lowlatencyUpgrade linux-image-4.15.0-1161-gcpUpgrade linux-image-4.4.0-1131-kvmUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1013-laptopUpgrade linux-image-6.5.0-1017-awsUpgrade linux-image-awsUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-4.15.0-1167-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1011-starfiveUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1176-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-253-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-6.5.0-1017-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-4.15.0-224-lowlatencyUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1020-oracle-64kUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-6.5.0-1019-oemUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-27-generic-64kUpgrade linux-image-4.15.0-1151-kvmUpgrade linux-image-6.5.0-1018-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-1168-awsUpgrade linux-image-4.15.0-224-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1127-azureUpgrade linux-image-6.5.0-27-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1130-awsUpgrade linux-image-4.15.0-1130-oracleUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-175-genericUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1014-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-6.5.0-1018-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-6.5.0-27-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-27-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1020-oracle | Apr 10, 2024 | Jan 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub