The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
ipack: ipoctal: fix stack information leak
The tty driver name is used also after registering the driver and must specifically not be allocated on the stack to avoid leaking information to user space (or triggering an oops).
Drivers should not try to encode topology information in the tty device name but this one snuck in through staging without anyone noticing and another driver has since copied this malpractice.
Fixing the ABI is a separate issue, but this at least plugs the security hole.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-64kbUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-socionext | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-gcp-4.15Upgrade linux-bluefieldUpgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-awsUpgrade linux-hweUpgrade linux-gcp-5.4Upgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-azure-fips | Nov 19, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub