In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Add alignment check for event ring read pointer
Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption.
So add a alignment check for event ring read pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-altera | Apr 18, 2024 | Mar 11, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-nvidia-6.5Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpae | May 17, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub