In the Linux kernel, the following vulnerability has been resolved:
ASoC: hdmi-codec: Fix OOB memory accesses
Correct size of iec_status array by changing it to the size of status array of the struct snd_aes_iec958. This fixes out-of-bounds slab read accesses made by memcpy() of the hdmi-codec driver. This problem is reported by KASAN.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-azure-devel | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub