In the Linux kernel, the following vulnerability has been resolved:
efi/capsule-loader: fix incorrect allocation size
gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit phys_addr_t:
drivers/firmware/efi/capsule-loader.c: In function 'efi_capsule_open': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'phys_addr_t' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | cap_info->phys = kzalloc(sizeof(void *), GFP_KERNEL); | ^
Use the correct type instead here.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade perf | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.82-99.168 | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-preemptUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-debug | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-gke-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-aws-lts-20.04 | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub