In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debugUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 25, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfo | May 8, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-lgUpgrade kselftests-kmp-64kb | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub