In the Linux kernel, the following vulnerability has been resolved:
ice: ensure the copied buf is NUL terminated
Currently, we allocate a count-sized kernel buffer and copy count bytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade dtb-alteraUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-docs | Jul 23, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws | Aug 9, 2024 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub