In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.262-200.489Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade bpftool-debuginfo | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azure | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-azureUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-awsUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-oracle | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub