In the Linux kernel, the following vulnerability has been resolved:
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
memcpy() is called in a loop while 'operation->length' upper bound is not checked and 'data_idx' also increments.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-abi-stablelists | Aug 12, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 28, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Apr 28, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfo | Aug 22, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-azure-optional | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linuxUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeop-5.15Upgrade linux-hwe-5.15Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-azure-fde-5.15Upgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-gcp | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub