In the Linux kernel, the following vulnerability has been resolved:
igb: Fix string truncation warnings in igb_set_fw_version
Commit 1978d3ead82c ("intel: fix string truncation warnings") fixes '-Wformat-truncation=' warnings in igb_main.c by using kasprintf.
drivers/net/ethernet/intel/igb/igb_main.c:3092:53: warning：‘%d’ directive output may be truncated writing between 1 and 5 bytes into a region of size between 1 and 13 [-Wformat-truncation=] 3092 | "%d.%d, 0x%08x, %d.%d.%d", | ^~ drivers/net/ethernet/intel/igb/igb_main.c:3092:34: note：directive argument in the range [0, 65535] 3092 | "%d.%d, 0x%08x, %d.%d.%d", | ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/intel/igb/igb_main.c:3092:34: note：directive argument in the range [0, 65535] drivers/net/ethernet/intel/igb/igb_main.c:3090:25: note：‘snprintf’ output between 23 and 43 bytes into a destination of size 32
kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.
Fix this warning by using a larger space for adapter->fw_version, and then fall back and continue to use snprintf.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-core | Aug 12, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade perfUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source | Jul 23, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub