In the Linux kernel, the following vulnerability has been resolved:
kdb: Fix buffer overflow during tab-complete
Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer.
Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.349-266.564Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-livepatch-5.10.218-206.860-debuginfoUpgrade kernel-livepatch-4.14.348-265.565Upgrade kernel-livepatch-5.10.217-205.860-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.216-204.855-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-4.14.345-262.561-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.348-265.562Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-livepatch-5.10.218-208.862-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.218-208.862Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.10.218-206.860 | Aug 14, 2024 | Jul 5, 2024 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2024 | Jul 5, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Jan 21, 2025 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-azureUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-kvmUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-1014-azure | Aug 9, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub