In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade perf | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.262-200.489 | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-default | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-ibmUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-raspi | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub