In the Linux kernel, the following vulnerability has been resolved:
scsi: qedf: Ensure the copied buf is NUL terminated
Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade libperfUpgrade kernel-toolsUpgrade kernel-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-docUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules | Sep 26, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade bpftool | May 22, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 19, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64 | Sep 17, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rt | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oem-osp1 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub