In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asus-ec-sensors) check sensor index in read_string()
Prevent a potential invalid memory access when the requested sensor is not found.
find_ec_sensor_index() may return a negative value (e.g. -ENOENT), but its result was used without checking, which could lead to undefined behavior when passed to get_sensor_info().
Add a proper check to return -EINVAL if sensor_index is negative.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[groeck: Return error code returned from find_ec_sensor_index]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-armUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinxUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oem-24.04cUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gkeUpgrade linux-image-raspi-6.14Upgrade linux-image-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-aws | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
