In the Linux kernel, the following vulnerability has been resolved:
efi/capsule-loader: fix incorrect allocation size
gcc-14 notices that the allocation with sizeof(void) on 32-bit architectures is not enough for a 64-bit phys_addr_t:
drivers/firmware/efi/capsule-loader.c: In function 'efi_capsule_open': drivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size '4' for type 'phys_addr_t' {aka 'long long unsigned int'} with size '8' [-Werror=alloc-size] 295 | cap_info->phys = kzalloc(sizeof(void *), GFP_KERNEL); | ^
Use the correct type instead here.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfo | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-headers | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-default-base-rebuild | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-intelUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-1086-bluefield | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub