In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
syzbot reported unsafe calls to copy_from_sockptr() [1]
Use copy_safe_from_sockptr() instead.
[1]
BUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline] BUG: KASAN: slab-out-of-bounds in nfc_llcp_setsockopt+0x6c2/0x850 net/nfc/llcp_sock.c:255 Read of size 4 at addr ffff88801caa1ec3 by task syz-executor459/5078
CPU: 0 PID: 5078 Comm: syz-executor459 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 copy_from_sockptr_offset include/linux/sockptr.h:49 [inline] copy_from_sockptr include/linux/sockptr.h:55 [inline] nfc_llcp_setsockopt+0x6c2/0x850 net/nfc/llcp_sock.c:255 do_sock_setsockopt+0x3b1/0x720 net/socket.c:2311 __sys_setsockopt+0x1ae/0x250 net/socket.c:2334 __do_sys_setsockopt net/socket.c:2343 [inline] __se_sys_setsockopt net/socket.c:2340 [inline] __x64_sys_setsockopt+0xb5/0xd0 net/socket.c:2340 do_syscall_64+0xfd/0x240 entry_SYSCALL_64_after_hwframe+0x6d/0x75 RIP: 0033:0x7f7fac07fd89 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff660eb788 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7fac07fd89 RDX: 0000000000000000 RSI: 0000000000000118 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000000 R10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-rt_debug | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub