In the Linux kernel, the following vulnerability has been resolved:
greybus: lights: check return of get_channel_from_mode
If channel for the given node is not found we return null from get_channel_from_mode. Make sure we validate the return pointer before using it in two of the missing places.
This was originally reported in [0]: Found by Linux Verification Center (linuxtesting.org) with SVACE.
[0] https://lore.kernel.org/all/[email protected]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-231-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04 | Aug 9, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub