In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers sometimes get very confused about time, which can result in full-sized integers, and, in this case, buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is normally for signed integers. This is intentional for debugging purposes, but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-azure-vdso | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-generic-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub