In the Linux kernel, the following vulnerability has been resolved:
crypto: qat/qat_420xx - fix off by one in uof_get_name()
This is called from uof_get_name_420xx() where "num_objs" is the ARRAY_SIZE() of fw_objs[]. The > needs to be >= to prevent an out of bounds access.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04 | Feb 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub