In the Linux kernel, the following vulnerability has been resolved:
scsi: qedi: Fix crash while reading debugfs attribute
The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash.
To fix this issue, use a small local stack buffer for sprintf() and then call simple_read_from_buffer(), which in turns make the copy_to_user() call.
BUG: unable to handle page fault for address: 00007f4801111000 PGD 8000000864df6067 P4D 8000000864df6067 PUD 864df7067 PMD 846028067 PTE 0 Oops: 0002 [#1] PREEMPT SMP PTI Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 06/15/2023 RIP: 0010:memcpy_orig+0xcd/0x130 RSP: 0018:ffffb7a18c3ffc40 EFLAGS: 00010202 RAX: 00007f4801111000 RBX: 00007f4801111000 RCX: 000000000000000f RDX: 000000000000000f RSI: ffffffffc0bfd7a0 RDI: 00007f4801111000 RBP: ffffffffc0bfd7a0 R08: 725f746f6e5f6f64 R09: 3d7265766f636572 R10: ffffb7a18c3ffd08 R11: 0000000000000000 R12: 00007f4881110fff R13: 000000007fffffff R14: ffffb7a18c3ffca0 R15: ffffffffc0bfd7af FS: 00007f480118a740(0000) GS:ffff98e38af00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4801111000 CR3: 0000000864b8e001 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? page_fault_oops+0x183/0x510 ? exc_page_fault+0x69/0x150 ? asm_exc_page_fault+0x22/0x30 ? memcpy_orig+0xcd/0x130 vsnprintf+0x102/0x4c0 sprintf+0x51/0x80 qedi_dbg_do_not_recover_cmd_read+0x2f/0x50 [qedi 6bcfdeeecdea037da47069eca2ba717c84a77324] full_proxy_read+0x50/0x80 vfs_read+0xa5/0x2e0 ? folio_add_new_anon_rmap+0x44/0xa0 ? set_pte_at+0x15/0x30 ? do_pte_missing+0x426/0x7f0 ksys_read+0xa5/0xe0 do_syscall_64+0x58/0x80 ? __count_memcg_events+0x46/0x90 ? count_memcg_event_mm+0x3d/0x60 ? handle_mm_fault+0x196/0x2f0 ? do_user_addr_fault+0x267/0x890 ? exc_page_fault+0x69/0x150 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f4800f20b4d
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libperfUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-debugUpgrade rvUpgrade kernel-uki-virt | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-tools | May 22, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 6, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-core | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-symsUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-baseUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-azure | Aug 15, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.4.0-1137-azure | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub