In the Linux kernel, the following vulnerability has been resolved:
efi/capsule-loader: fix incorrect allocation size
gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit phys_addr_t:
drivers/firmware/efi/capsule-loader.c: In function 'efi_capsule_open': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'phys_addr_t' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | cap_info->phys = kzalloc(sizeof(void *), GFP_KERNEL); | ^
Use the correct type instead here.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfo | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.82-99.168Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-tools-devel | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-preempt-develUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-devel-rtUpgrade kernel-macros | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1058-nvidia-lowlatency | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub