In the Linux kernel, the following vulnerability has been resolved:
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump | Aug 12, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 28, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Apr 28, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-debug | Aug 22, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-source-azureUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdso | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-gkeop-5.15Upgrade linux-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-raspiUpgrade linux-gkeUpgrade linuxUpgrade linux-lowlatency-hwe-5.15 | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub