In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-core | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade perfUpgrade kernel-livepatch-4.14.262-200.489Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-devel | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-preempt-develUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-azure-4.15Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-oracle | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub