In the Linux kernel, the following vulnerability has been resolved:
comedi: vmk80xx: fix bulk-buffer overflow
The driver is using endpoint-sized buffers but must not assume that the tx and rx buffers are of equal size or a malicious device could overflow the slab-allocated receive buffer when doing bulk transfers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-devel | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-ibm-5.4Upgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linuxUpgrade linux-ibmUpgrade linux-hweUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-gkeop | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub