In the Linux kernel, the following vulnerability has been resolved:
w1: therm: Fix off-by-one buffer overflow in alarms_store
The sysfs buffer passed to alarms_store() is allocated with 'size + 1' bytes and a NUL terminator is appended. However, the 'size' argument does not account for this extra byte. The original code then allocated 'size' bytes and used strcpy() to copy 'buf', which always writes one byte past the allocated buffer since strcpy() copies until the NUL terminator at index 'size'.
Fix this by parsing the 'buf' parameter directly using simple_strtoll() without allocating any intermediate memory or string copying. This removes the overflow while simplifying the code.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 11, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intelUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-azure-fips-6.8 | Apr 10, 2026 | Feb 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Feb 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub