In the Linux kernel, the following vulnerability has been resolved:
IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-ec2-develUpgrade kernel-develUpgrade kernel-ec2Upgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade dtb-armUpgrade kernel-trace-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-ec2-baseUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-xenUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-xen-develUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-xen-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-traceUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-apm | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1151-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-277-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-277-lowlatencyUpgrade linux-image-4.4.0-1152-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1121-fipsUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1189-aws | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub