In the Linux kernel, the following vulnerability has been resolved:
mmc: core: Avoid negative index with array access
Commit 4d0c8d0aef63 ("mmc: core: Use mrq.sbc in close-ended ffu") assigns prev_idata = idatas[i - 1], but doesn't check that the iterator i is greater than zero. Let's fix this by adding a check.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.215-203.850Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | Apr 10, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-generic-lpae | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub