In the Linux kernel, the following vulnerability has been resolved:
thermal: intel: powerclamp: fix mismatch in get function for max_idle
KASAN reported this
[ 444.853098] BUG: KASAN: global-out-of-bounds in param_get_int+0x77/0x90 [ 444.853111] Read of size 4 at addr ffffffffc16c9220 by task cat/2105 ... [ 444.853442] The buggy address belongs to the variable: [ 444.853443] max_idle+0x0/0xffffffffffffcde0 [intel_powerclamp]
There is a mismatch between the param_get_int and the definition of max_idle. Replacing param_get_int with param_get_byte resolves this issue.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-amlogic | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub