In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvm | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-headers | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-rt-debug | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-preempt-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azure | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub