In the Linux kernel, the following vulnerability has been resolved:
of: module: add buffer overflow check in of_modalias()
In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade bpftoolUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade perfUpgrade kernel-debug | Nov 7, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.15.184-125.190 | May 30, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfo | Aug 5, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool | Jan 21, 2025 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-modules-extra | Nov 19, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-armUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuild | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-generic-5.15Upgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.4.0-1132-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-2084-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-intelUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-lowlatency-5.4Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1152-gcpUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-fips-5.4Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.4.0-1154-azureUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.4.0-1067-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.4.0-220-generic-lpaeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-220-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-kvm-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-4.15.0-1191-azureUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-5.4.0-1147-oracleUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-fips-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-5.4.0-1152-gcp-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1166-kvmUpgrade linux-image-kvm-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oracle-4.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1108-bluefieldUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-2100-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1149-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1155-azure-fipsUpgrade linux-image-4.15.0-240-genericUpgrade linux-image-ibm-5.4Upgrade linux-image-4.15.0-240-lowlatencyUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.4.0-1148-oracleUpgrade linux-image-aws-4.15Upgrade linux-image-5.4.0-1095-ibmUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.4.0-1053-iotUpgrade linux-image-fips-5.4Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.4.0-1149-aws-fipsUpgrade linux-image-snapdragon-5.4Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gcp-5.4Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-4.15.0-2121-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-awsUpgrade linux-image-aws-5.4Upgrade linux-image-kvmUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-azure-4.15Upgrade linux-image-4.15.0-1176-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1123-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-5.4Upgrade linux-image-5.4.0-220-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-raspi-5.4Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-5.4Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-4.15.0-1183-awsUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-4.15Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-5.4Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-1138-fipsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1145-oracleUpgrade linux-image-bluefield-5.4Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.4.0-1136-kvm | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub