In the Linux kernel, the following vulnerability has been resolved:
of: module: prevent NULL pointer dereference in vsnprintf()
In of_modalias(), we can get passed the str and len parameters which would cause a kernel oops in vsnprintf() since it only allows passing a NULL ptr when the length is also 0. Also, we need to filter out the negative values of the len parameter as these will result in a really huge buffer since snprintf() takes size_t parameter while ours is ssize_t...
Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Nov 5, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-preemptUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-develUpgrade dtb-amdUpgrade dlm-kmp-rt | Jun 12, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-nvidiaUpgrade linux-image-gke | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub