In the Linux kernel, the following vulnerability has been resolved:
of: module: add buffer overflow check in of_modalias()
In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-doc | Nov 7, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools | May 30, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernelUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools | Aug 5, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfo | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-macrosUpgrade dtb-apmUpgrade dtb-broadcomUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade dtb-nvidia | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-gcp-5.4Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracle-5.4Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-4.15.0-2100-azure-fipsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-generic-5.4Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-ibm-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefield-5.4Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-raspi2Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-220-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-4.15.0-240-lowlatencyUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1149-awsUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1183-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-fips-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-5.4Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-fips-5.15Upgrade linux-image-5.4.0-1123-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1145-oracleUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-4.15.0-240-genericUpgrade linux-image-5.4.0-1155-azure-fipsUpgrade linux-image-azure-4.15Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-4.15Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-5.4Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1053-iotUpgrade linux-image-4.15.0-2121-aws-fipsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-snapdragon-5.4Upgrade linux-image-aws-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1138-fipsUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-4.15.0-1176-gcpUpgrade linux-image-5.4.0-1136-kvmUpgrade linux-image-5.4.0-1148-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-raspi-5.4Upgrade linux-image-aws-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.4.0-1149-aws-fipsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.4.0-1095-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-aws-hweUpgrade linux-image-kvm-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-ibm-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.4.0-1132-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1166-kvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtual-5.15Upgrade linux-image-5.4.0-1152-gcpUpgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.4.0-1154-azureUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.4.0-1067-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-220-generic-lpaeUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.4.0-1147-oracleUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-lowlatency-5.4Upgrade linux-image-5.4.0-1108-bluefieldUpgrade linux-image-azure-fips-5.4Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oracle-4.15Upgrade linux-image-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-aws-fips-5.4Upgrade linux-image-4.15.0-1191-azureUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.4.0-220-genericUpgrade linux-image-4.15.0-2084-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1152-gcp-fipsUpgrade linux-image-nvidia-5.15 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub