In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Add alignment check for event ring read pointer
Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption.
So add a alignment check for event ring read pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 11, 2024 |
| Suse | — | Upgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-amdUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-default | Apr 18, 2024 | Mar 11, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-starfiveUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k | May 17, 2024 | Mar 11, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub