In the Linux kernel, the following vulnerability has been resolved:
virtio-blk: fix implicit overflow on virtio_max_dma_size
The following codes have an implicit conversion from size_t to u32: (u32)max_size = (size_t)virtio_max_dma_size(vdev);
This may lead overflow, Ex (size_t)4G -> (u32)0. Once virtio_max_dma_size() has a larger size than U32_MAX, use U32_MAX instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug | Aug 12, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headers | Jul 9, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.66-91.160Upgrade perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headers | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azure-baseUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-devel | Jul 10, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-nvidia-tegraUpgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-nvidia-6.5Upgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linuxUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-awsUpgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-ibm-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-gkeop-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub