In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asus-ec-sensors) check sensor index in read_string()
Prevent a potential invalid memory access when the requested sensor is not found.
find_ec_sensor_index() may return a negative value (e.g. -ENOENT), but its result was used without checking, which could lead to undefined behavior when passed to get_sensor_info().
Add a proper check to return -EINVAL if sensor_index is negative.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[groeck: Return error code returned from find_ec_sensor_index]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-xilinxUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspi-6.14 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub