In the Linux kernel, the following vulnerability has been resolved:
rcu: Fix buffer overflow in print_cpu_stall_info()
The rcuc-starvation output from print_cpu_stall_info() might overflow the buffer if there is a huge difference in jiffies difference. The situation might seem improbable, but computers sometimes get very confused about time, which can result in full-sized integers, and, in this case, buffer overflow.
Also, the unsigned jiffies difference is printed using %ld, which is normally for signed integers. This is intentional for debugging purposes, but it is not obvious from the code.
This commit therefore changes sprintf() to snprintf() and adds a clarifying comment about intention of %ld format.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | Mar 27, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-default-vdso | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-raspi | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub