In the Linux kernel, the following vulnerability has been resolved:
IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-xen-baseUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-xenUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-traceUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-ec2-baseUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-default-manUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-trace-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-ec2Upgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-ec2-develUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-docs | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1121-fipsUpgrade linux-image-4.4.0-1189-awsUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-4.4.0-277-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-4.4.0-277-genericUpgrade linux-image-4.4.0-1152-kvm | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub