In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers sometimes get very confused about time, which can result in full-sized integers, and, in this case, buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is normally for signed integers. This is intentional for debugging purposes, but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpfUpgrade kernel-tools-devel | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub