In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: avoid off-by-one read from userspace
We try to access count + 1 byte from userspace with memdup_user(buffer, count + 1). However, the userspace only provides buffer of count bytes and only these count bytes are verified to be okay to access. To ensure the copied buffer is NUL terminated, we use memdup_user_nul instead.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-headersUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade rvUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade python3-perf | Nov 4, 2024 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 27, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-uki-virtUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-develUpgrade kernel-rt-debugUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-core | Jul 29, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade dtb-marvell | Jul 23, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-oracleUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub