In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade libperfUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-docUpgrade kernel-64k-devel-matchedUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade perf | May 8, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-devel | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-oemUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.4.0-1135-azure | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub