In the Linux kernel, the following vulnerability has been resolved:
of: module: add buffer overflow check in of_modalias()
In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel | Nov 7, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-headers | May 30, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-libbpf | Aug 5, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perf | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade perfUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-modules-extra | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extra | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-5.4Upgrade linux-image-oracleUpgrade linux-image-gcp-5.4Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-240-lowlatencyUpgrade linux-image-5.4.0-220-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1176-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1123-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1149-awsUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-4.15.0-2100-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-5.4Upgrade linux-image-5.4.0-1053-iotUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-bluefield-5.4Upgrade linux-image-virtual-5.4Upgrade linux-image-oracle-5.4Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1145-oracleUpgrade linux-image-5.4.0-1149-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-azure-4.15Upgrade linux-image-5.4.0-1136-kvmUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-generic-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.4.0-1148-oracleUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.4.0-1095-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-1183-awsUpgrade linux-image-aws-4.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-snapdragon-5.4Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspi-5.4Upgrade linux-image-fips-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-4.15.0-1138-fipsUpgrade linux-image-4.15.0-240-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1155-azure-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-4.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fips-5.4Upgrade linux-image-4.15.0-2121-aws-fipsUpgrade linux-image-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.4.0-1152-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1191-azureUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-4.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1152-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-fips-5.4Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.4.0-1132-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-4.15.0-1166-kvmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.4.0-1067-xilinx-zynqmpUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvm-5.4Upgrade linux-image-5.4.0-1154-azureUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.4.0-1147-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-5.4Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-5.4Upgrade linux-image-kvm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1108-bluefieldUpgrade linux-image-5.4.0-220-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-4.15.0-2084-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azureUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-220-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-5.15 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub