In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers sometimes get very confused about time, which can result in full-sized integers, and, in this case, buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is normally for signed integers. This is intentional for debugging purposes, but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt-devel | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibmUpgrade linux-image-generic-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub