In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade libperfUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64k-coreUpgrade kernel-debug-modules-core | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfo | May 8, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-source-rt | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-intelUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oemUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-lts-22.04 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub