In the Linux kernel, the following vulnerability has been resolved:
kdb: Fix buffer overflow during tab-complete
Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer.
Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.10.217-205.860-debuginfoUpgrade kernel-livepatch-5.10.218-206.860-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.216-204.855-debuginfoUpgrade kernel-livepatch-4.14.348-265.565Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.218-208.862Upgrade python-perfUpgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-develUpgrade kernel-livepatch-4.14.345-262.561-debuginfoUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-5.10.218-208.862-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | Aug 14, 2024 | Jul 5, 2024 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2024 | Jul 5, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-devel | Jan 21, 2025 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-genericUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-1072-azure | Aug 9, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub