In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers sometimes get very confused about time, which can result in full-sized integers, and, in this case, buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is normally for signed integers. This is intentional for debugging purposes, but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfo | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-renesas | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-fde | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub