In the Linux kernel, the following vulnerability has been resolved:
IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
Overflowing either addrlimit or bytes_togo can allow userspace to trigger a buffer overflow of kernel memory. Check for overflows in all the places doing math on user controlled buffers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-trace-baseUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-ec2Upgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-ec2-baseUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade kernel-ec2-develUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-trace-develUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-xen-baseUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-traceUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-xen-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-xen | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-4.4.0-1121-fipsUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1189-awsUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-277-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-4.4.0-1152-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-277-generic | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub