In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - validate slices count returned by FW
The function adf_send_admin_tl_start() enables the telemetry (TL) feature on a QAT device by sending the ICP_QAT_FW_TL_START message to the firmware. This triggers the FW to start writing TL data to a DMA buffer in memory and returns an array containing the number of accelerators of each type (slices) supported by this HW. The pointer to this array is stored in the adf_tl_hw_data data structure called slice_cnt.
The array slice_cnt is then used in the function tl_print_dev_data() to report in debugfs only statistics about the supported accelerators. An incorrect value of the elements in slice_cnt might lead to an out of bounds memory read. At the moment, there isn't an implementation of FW that returns a wrong value, but for robustness validate the slice count array returned by FW.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade dtb-socionext | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8 | Aug 9, 2024 | Jun 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub