In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Add alignment check for event ring read pointer
Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption.
So add a alignment check for event ring read pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade dtb-qcomUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-devel | Apr 18, 2024 | Mar 11, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-starfiveUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-1063-azure-fde | May 17, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub