In the Linux kernel, the following vulnerability has been resolved:
media: vivid: fix buffer overwrite when using > 32 buffers
The maximum number of buffers that can be requested was increased to 64 for the video capture queue. But video capture used a must_blank array that was still sized for 32 (VIDEO_MAX_FRAME). This caused an out-of-bounds write when using buffer indices >= 32.
Create a new define MAX_VID_CAP_BUFFERS that is used to access the must_blank array and set max_num_buffers for the video capture queue.
This solves a crash reported by:
https://bugzilla.kernel.org/show_bug.cgi?id=219258
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1015-oem | Feb 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub