In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asus-ec-sensors) check sensor index in read_string()
Prevent a potential invalid memory access when the requested sensor is not found.
find_ec_sensor_index() may return a negative value (e.g. -ENOENT), but its result was used without checking, which could lead to undefined behavior when passed to get_sensor_info().
Add a proper check to return -EINVAL if sensor_index is negative.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[groeck: Return error code returned from find_ec_sensor_index]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-obs-build | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-xilinxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-virtual-6.14 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub