In the Linux kernel, the following vulnerability has been resolved:
virtio-net: Add validation for used length
This adds validation for used length (might come from an untrusted device) to avoid data corruption or loss.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade bpftool | Sep 26, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.59-52.142Upgrade bpftool-debuginfo | May 22, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extra | Oct 2, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-macros | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub