In the Linux kernel, the following vulnerability has been resolved:
firewire: nosy: ensure user_length is taken into account when fetching packet contents
Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 4, 2024 | May 14, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-armUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dtb-socionextUpgrade ocfs2-kmp-azure | Jun 12, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-awsUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-nolpaeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64k | Aug 9, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub