In the Linux kernel, the following vulnerability has been resolved:
crypto: virtio/akcipher - Fix stack overflow on memcpy
sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfo | Aug 28, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-64kb-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub