In the Linux kernel, the following vulnerability has been resolved:
thermal: core: prevent potential string overflow
The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.330-250.540Upgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.139-93.147Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-aarch64 | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-devel | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-lg | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-ibm-5.4Upgrade linux-azure-fdeUpgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-awsUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-fipsUpgrade linux-nvidia-6.5Upgrade linux-azure-5.15Upgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-xilinx-zynqmpUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-gkeop-5.15Upgrade linux-gcp-5.4Upgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-intel-iotg | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub