In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headers | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.262-200.489Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade perf-debuginfoUpgrade kernel-devel | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvm | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-docs | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-hweUpgrade linux-ibm-5.4Upgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-azureUpgrade linuxUpgrade linux-gcp-fips | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub