In the Linux kernel, the following vulnerability has been resolved:
of: module: add buffer overflow check in of_modalias()
In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-tools-libs | Nov 7, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.15.184-125.190 | May 30, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfo | Aug 5, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfo | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-preemptUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-debug-devel | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-5.4Upgrade linux-image-4.15.0-1183-awsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1149-awsUpgrade linux-image-5.4.0-1123-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gcp-4.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1155-azure-fipsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-1138-fipsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-4.15.0-1176-gcpUpgrade linux-image-raspi-5.4Upgrade linux-image-4.15.0-1145-oracleUpgrade linux-image-5.4.0-1148-oracleUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.4.0-1095-ibmUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-5.4.0-1149-aws-fipsUpgrade linux-image-5.4.0-220-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-4.15.0-2121-aws-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1136-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-4.15Upgrade linux-image-virtual-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-2100-azure-fipsUpgrade linux-image-4.15.0-240-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-ibm-5.4Upgrade linux-image-5.4.0-1053-iotUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-snapdragon-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-azure-5.4Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-5.4Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-bluefield-5.4Upgrade linux-image-gcpUpgrade linux-image-fips-5.4Upgrade linux-image-generic-5.4Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-4.15.0-240-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-4.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oracle-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-azure-fips-5.4Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-220-generic-lpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-aws-fips-5.4Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-5.4.0-1147-oracleUpgrade linux-image-5.4.0-1154-azureUpgrade linux-image-lowlatency-5.4Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-4.15.0-1191-azureUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-4.15.0-1166-kvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-kvm-5.4Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.4.0-1152-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oemUpgrade linux-image-5.4.0-1132-raspiUpgrade linux-image-genericUpgrade linux-image-generic-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-cvmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-4.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-4.15.0-2084-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.4.0-220-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1067-xilinx-zynqmpUpgrade linux-image-5.4.0-1152-gcpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1108-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-azure-fips-4.15 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub