In the Linux kernel, the following vulnerability has been resolved:
scsi: bfa: Ensure the copied buf is NUL terminated
Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade dtb-sprdUpgrade kernel-default-manUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-azure-vdso | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1176-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-oem-20.04b | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub