In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers sometimes get very confused about time, which can result in full-sized integers, and, in this case, buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is normally for signed integers. This is intentional for debugging purposes, but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rt | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub