In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: fix off by one in BIOS boundary checking
Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's with GeForce 2 MX GPUs, leaving the system with no working console.
This is probably only seen on OpenFirmware machines like PowerPC Macs because the BIOS image provided by OF is only the used parts of the ROM, not a power-of-two blocks read from PCI directly so PCs always have empty bytes at the end that are never accessed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Nov 5, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-devel | Jan 21, 2025 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-manUpgrade kernel-preemptUpgrade cluster-md-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade reiserfs-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-iot | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub