In the Linux kernel, the following vulnerability has been resolved:
of: module: add buffer overflow check in of_modalias()
In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-docUpgrade perfUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-modules | Nov 7, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | May 30, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64 | Aug 5, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-devel | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-preemptUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-build | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-azure-5.15Upgrade linux-image-4.15.0-1166-kvmUpgrade linux-image-kvm-5.4Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.4.0-220-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-4.15.0-2084-gcp-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.4.0-1147-oracleUpgrade linux-image-5.4.0-220-generic-lpaeUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-intelUpgrade linux-image-5.4.0-1108-bluefieldUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-5.15Upgrade linux-image-5.4.0-1152-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-nvidia-5.15Upgrade linux-image-azure-fips-5.4Upgrade linux-image-genericUpgrade linux-image-lowlatency-5.4Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-aws-fips-5.4Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.4.0-1154-azureUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.4.0-1067-xilinx-zynqmpUpgrade linux-image-4.15.0-1191-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-4.15Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1152-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.4.0-1132-raspiUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-virtual-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-4.15.0-1145-oracleUpgrade linux-image-4.15.0-240-genericUpgrade linux-image-5.4.0-1155-azure-fipsUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1149-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1053-iotUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1095-ibmUpgrade linux-image-5.4.0-1148-oracleUpgrade linux-image-5.4.0-1149-aws-fipsUpgrade linux-image-virtual-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-4.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-4.15.0-1138-fipsUpgrade linux-image-azure-4.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-4.15.0-1183-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1123-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1136-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-fips-5.4Upgrade linux-image-generic-5.4Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-4.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-ibm-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-220-lowlatencyUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-aws-fips-4.15Upgrade linux-image-nvidiaUpgrade linux-image-azure-5.4Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-240-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-2100-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-5.4Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-snapdragon-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-bluefield-5.4Upgrade linux-image-gcp-5.4Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracleUpgrade linux-image-oracle-5.4Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-awsUpgrade linux-image-4.15.0-1176-gcpUpgrade linux-image-4.15.0-2121-aws-fipsUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1010-ibm | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub