In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asus-ec-sensors) check sensor index in read_string()
Prevent a potential invalid memory access when the requested sensor is not found.
find_ec_sensor_index() may return a negative value (e.g. -ENOENT), but its result was used without checking, which could lead to undefined behavior when passed to get_sensor_info().
Add a proper check to return -EINVAL if sensor_index is negative.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[groeck: Return error code returned from find_ec_sensor_index]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-apple | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gke-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub