In the Linux kernel, the following vulnerability has been resolved:
crypto: virtio/akcipher - Fix stack overflow on memcpy
sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-devel | Aug 28, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade reiserfs-kmp-default | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub