In the Linux kernel, the following vulnerability has been resolved:
of: module: prevent NULL pointer dereference in vsnprintf()
In of_modalias(), we can get passed the str and len parameters which would cause a kernel oops in vsnprintf() since it only allows passing a NULL ptr when the length is also 0. Also, we need to filter out the negative values of the len parameter as these will result in a really huge buffer since snprintf() takes size_t parameter while ours is ssize_t...
Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Nov 5, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-devel | Jun 12, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub