In the Linux kernel, the following vulnerability has been resolved:
kdb: Fix buffer overflow during tab-complete
Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer.
Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-livepatch-5.10.218-208.862-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.219-208.866Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.217-205.860Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.218-208.862Upgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-livepatch-4.14.345-262.561-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-livepatch-5.10.217-205.860-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-livepatch-4.14.348-265.565Upgrade kernel-livepatch-5.10.216-204.855-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.10.218-206.860-debuginfo | Aug 14, 2024 | Jul 5, 2024 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2024 | Jul 5, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools | Jan 21, 2025 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-rt-extra | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-gcpUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-intelUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmp | Aug 9, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub