In the Linux kernel, the following vulnerability has been resolved:
mmc: core: Avoid negative index with array access
Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfo | Apr 10, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-source-vanilla | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-virtualUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-ibmUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04 | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub