In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asus-ec-sensors) check sensor index in read_string()
Prevent a potential invalid memory access when the requested sensor is not found.
find_ec_sensor_index() may return a negative value (e.g. -ENOENT), but its result was used without checking, which could lead to undefined behavior when passed to get_sensor_info().
Add a proper check to return -EINVAL if sensor_index is negative.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[groeck: Return error code returned from find_ec_sensor_index]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-armUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-qcom | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-aws-6.14Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub