A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_BLOCK_PROC_CALL case (via the ioctl I2C_SMBUS) with malicious input data. This flaw could allow a local user to crash the system.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelists | Jan 26, 2023 | Sep 9, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 24, 2023 | Sep 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 9, 2022 |
| Oracle_linux | — | Upgrade kernel | Jan 25, 2023 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 24, 2023 | Sep 9, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvm | Mar 12, 2024 | Sep 9, 2022 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-riscvUpgrade linux-hwe-5.15Upgrade linux-kvmUpgrade linux-oem-5.14Upgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-gke-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-azureUpgrade linux-raspiUpgrade linux-realtimeUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linuxUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-oem-5.17Upgrade linux-azure-5.15Upgrade linux-lowlatency | Nov 19, 2024 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub