In the Linux kernel, the following vulnerability has been resolved:
crypto: qat/qat_4xxx - fix off by one in uof_get_name()
The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2025 | Dec 24, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-azure | Feb 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub