In the Linux kernel, the following vulnerability has been resolved:
mmc: core: Avoid negative index with array access
Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perf | Apr 10, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade kernel-64kb-devel | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oem-20.04c | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub