In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-modules | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.262-200.489Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade python-perf-debuginfo | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-default-man | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-aws-5.4 | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub