In the Linux kernel, the following vulnerability has been resolved:
thermal: core: prevent potential string overflow
The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.330-250.540Upgrade perfUpgrade kernel-livepatch-5.10.201-191.748Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-livepatch-5.15.139-93.147Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-libbpf-static | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-amd | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatencyUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-gkeop-5.15Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-nvidia-6.5Upgrade linux-iotUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-gcp-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegraUpgrade linux-ibm-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-aws-5.15Upgrade linuxUpgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-ibm-5.15Upgrade linux-realtime | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub