In the Linux kernel, the following vulnerability has been resolved:
ASoC: max9759: fix underflow in speaker_gain_control_put()
Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put()
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-preempt-develUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-devel-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-azureUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linuxUpgrade linux-gcpUpgrade linux-ibmUpgrade linux-gcp-5.4 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub