In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Fix string overflow in SCPI genpd driver
Without the bound checks for scpi_pd->name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name string is set at maximum size of 30.
Let us fix it by using devm_kasprintf so that the string buffer is allocated dynamically.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernelUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.262-200.489 | Aug 2, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modules | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-docs | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linuxUpgrade linux-azure-4.15Upgrade linux-ibmUpgrade linux-hweUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-kvm | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub