In the Linux kernel, the following vulnerability has been resolved:
kdb: Fix buffer overflow during tab-complete
Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer.
Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.216-204.855-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernelUpgrade kernel-livepatch-5.10.218-206.860-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.217-205.860-debuginfoUpgrade kernel-livepatch-4.14.348-265.565Upgrade kernel-livepatch-4.14.349-266.564Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-develUpgrade kernel-livepatch-4.14.345-262.561-debuginfoUpgrade kernel-livepatch-5.10.218-208.862-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-5.10.218-208.862 | Aug 14, 2024 | Jul 5, 2024 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2024 | Jul 5, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 21, 2025 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1173-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-raspi2Upgrade linux-image-intelUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-hweUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-gkeop-5.15 | Aug 9, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub