In the Linux kernel, the following vulnerability has been resolved:
bna: ensure the copied buf is NUL terminated
Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade dtb-armUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade kernel-debug-devel | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1143-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-237-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-4.4.0-268-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-raspi2Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1181-awsUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-4.15.0-1188-azureUpgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-4.4.0-268-genericUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub