In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.231-173.360Upgrade perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | Apr 23, 2021 | Mar 22, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Mar 22, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perf | Sep 16, 2021 | Mar 22, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perf | Apr 30, 2021 | Mar 22, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs | Jul 19, 2021 | Mar 22, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python3-perf | Jun 28, 2021 | Mar 22, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 2, 2021 | Mar 22, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 22, 2021 |
| Suse | — | Upgrade gfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-bigmem-baseUpgrade kernel-64kb-optionalUpgrade kernel-vanilla-baseUpgrade kernel-preempt-extraUpgrade kernel-ppc64Upgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-xen-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-xenUpgrade kernel-64kb-develUpgrade kernel-trace-develUpgrade dlm-kmp-64kbUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade ocfs2-kmp-rt_debugUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade dlm-kmp-rt_debugUpgrade kernel-xen-baseUpgrade kernel-64kbUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade gfs2-kmp-rt_debugUpgrade reiserfs-kmp-azureUpgrade kernel-default-kgraftUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-ppc64-develUpgrade kselftests-kmp-64kbUpgrade kernel-ec2-baseUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade reiserfs-kmp-preemptUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-bigmemUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-devel-azureUpgrade kernel-bigmem-develUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-extraUpgrade kernel-pae-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade kernel-ec2Upgrade kernel-zfcpdumpUpgrade kernel-paeUpgrade kselftests-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-traceUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-rtUpgrade kernel-ppc64-base | Apr 10, 2021 | Mar 22, 2021 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1103-awsUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-144-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1049-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1115-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1026-raspiUpgrade linux-image-5.8.0-55-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-219-genericUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.8.0-1035-awsUpgrade linux-image-5.4.0-1048-azureUpgrade linux-image-5.4.0-1044-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-74-genericUpgrade linux-image-4.15.0-1072-oracleUpgrade linux-image-5.4.0-1046-oracleUpgrade linux-image-5.8.0-1032-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1016-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1036-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1086-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.10.0-1026-oemUpgrade linux-image-4.15.0-144-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-55-genericUpgrade linux-image-genericUpgrade linux-image-5.8.0-1031-oracleUpgrade linux-image-5.8.0-55-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-1040-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1100-gcpUpgrade linux-image-5.4.0-74-lowlatencyUpgrade linux-image-5.8.0-1033-azureUpgrade linux-image-4.15.0-1092-kvmUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.8.0-1028-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-219-lowlatencyUpgrade linux-image-5.8.0-55-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1103-snapdragonUpgrade linux-image-5.4.0-74-generic-lpaeUpgrade linux-image-5.4.0-1044-gkeUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.8.0-1026-raspi-nolpaeUpgrade linux-image-4.4.0-1100-kvmUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-144-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-gke-5.4 | May 12, 2021 | Mar 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub