In the Linux kernel, the following vulnerability has been resolved:
kdb: Fix buffer overflow during tab-complete
Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer.
Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.348-265.565Upgrade kernel-livepatch-5.10.216-204.855-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-livepatch-5.10.218-206.860-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.217-205.860-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-4.14.345-262.561-debuginfoUpgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.218-208.862-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.218-208.862Upgrade kernel-debuginfo-common-aarch64 | Aug 14, 2024 | Jul 5, 2024 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2024 | Jul 5, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Jan 21, 2025 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade dtb-armUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dtb-freescale | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oemUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04d | Aug 9, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub