In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade libperfUpgrade kernel-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade python3-perf | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade perf | May 8, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-nvidia | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub