The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
of: module: prevent NULL pointer dereference in vsnprintf()
In of_modalias(), we can get passed the str and len parameters which would cause a kernel oops in vsnprintf() since it only allows passing a NULL ptr when the length is also 0. Also, we need to filter out the negative values of the len parameter as these will result in a really huge buffer since snprintf() takes size_t parameter while ours is ssize_t...
Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Nov 5, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azure | Jun 12, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1009-nvidia-64k | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub