In the Linux kernel, the following vulnerability has been resolved:
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidia_setup_i2c_bus() it looks like that can't happen after examiniing the call sites.
CID 19036 (#1 of 1): Copy into fixed size buffer (STRING_OVERFLOW) 1. fixed_size_dest: You might overrun the 48-character fixed-size string chan->adapter.name by copying name without checking the length. 2. parameter_as_source: Note: This defect has an elevated risk because the source argument is a parameter of the current function. 89 strcpy(chan->adapter.name, name);
Fix this warning by using strscpy() which will silence the warning and prevent any future buffer overflows should the names used to identify the channel become much longer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linuxUpgrade linux-iotUpgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-hweUpgrade linux-gkeUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-intel-iotg | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub