In the Linux kernel, the following vulnerability has been resolved:
ice: ensure the copied buf is NUL terminated
Currently, we allocate a count-sized kernel buffer and copy count bytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-extra | Jul 23, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1009-raspi | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub