In the Linux kernel, the following vulnerability has been resolved:
tools/rtla: Fix clang warning about mount_point var size
clang is reporting this warning:
$ make HOSTCC=clang CC=clang LLVM_IAS=1 [...] clang -O -g -DVERSION=\"6.8.0-rc3\" -flto=auto -fexceptions -fstack-protector-strong -fasynchronous-unwind-tables -fstack-clash-protection -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS $(pkg-config --cflags libtracefs) -c -o src/utils.o src/utils.c
src/utils.c:548:66: warning: 'fscanf' may overflow; destination buffer in argument 3 has size 1024, but the corresponding specifier may require size 1025 [-Wfortify-source] 548 | while (fscanf(fp, "%*s %" STR(MAX_PATH) "s %99s %*s %*d %*d\n", mount_point, type) == 2) { | ^
Increase mount_point variable size to MAX_PATH+1 to avoid the overflow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.5Upgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-starfiveUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-generic-hwe-22.04 | Jul 15, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub