In the Linux kernel, the following vulnerability has been resolved:
kdb: Fix buffer overflow during tab-complete
Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer.
Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-livepatch-4.14.345-262.561-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.218-208.862Upgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-headersUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-5.10.218-208.862-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Aug 14, 2024 | Jul 5, 2024 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2024 | Jul 5, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-devel | Jan 21, 2025 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade dtb-renesasUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-amlogic | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-intelUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-classicUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-fde | Aug 9, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub