Updated: 2025-04-07
Description:
In the Linux kernel, the following vulnerability has been resolved: of: module: prevent NULL pointer dereference in vsnprintf() In of_modalias(), we can get passed the str and len parameters which would cause a kernel oops in vsnprintf() since it only allows passing a NULL ptr when the length is also 0. Also, we need to filter out the negative values of the len parameter as these will result in a really huge buffer since snprintf() takes size_t parameter while ours is ssize_t... Found by Linux Verification Center (linuxtesting.org) with the Svace static analysis tool. A null pointer dereference vulnerability was found in vsnprintf when str and len parameters are passed to vsnprintf(), which only allows passing a NULL ptr when the length is 0. This issue can result in a crash and damage to availability.
CVSS3: 5.5
| OS | Vendor version | Errata |
|---|---|---|
| RHEL 9 | 5.14.0-503.11.1.el9_5 | RHSA-2024:9315 |
| Oracle Linux 9 | 5.14.0-503.11.1.el9_5 | ELSA-2024-9315 |
| Rocky Linux 9 | 5.14.0-503.11.1.el9_5 | RLSA-2024:9315 |
| AlmaLinux 9 | 5.14.0-503.11.1.el9_5 | ALSA-2024:9315 |
| Ubuntu 24.04 | 6.8.0-38.38 | USN-6893-1 |
| OS | Original kernel version | State |
|---|---|---|
| RHEL 9 |
5.14.0-162.12.1.el9_1
show all
hide all
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1
5.14.0-284.11.1.el9_2
5.14.0-284.18.1.el9_2
5.14.0-284.25.1.el9_2
5.14.0-284.30.1.el9_2
5.14.0-362.13.1.el9_3
5.14.0-362.18.1.el9_3
5.14.0-362.24.1.el9_3
5.14.0-362.8.1.el9_3
5.14.0-427.13.1.el9_4
5.14.0-427.16.1.el9_4
5.14.0-427.18.1.el9_4
5.14.0-427.20.1.el9_4
5.14.0-427.22.1.el9_4
5.14.0-427.24.1.el9_4
5.14.0-427.26.1.el9_4
5.14.0-427.28.1.el9_4
5.14.0-427.31.1.el9_4
5.14.0-427.33.1.el9_4
5.14.0-427.35.1.el9_4
5.14.0-427.37.1.el9_4
5.14.0-427.40.1.el9_4
5.14.0-427.42.1.el9_4
5.14.0-70.13.1.el9_0
5.14.0-70.17.1.el9_0
5.14.0-70.22.1.el9_0
5.14.0-70.26.1.el9_0
5.14.0-70.30.1.el9_0
5.14.0-70.5.1.el9_0
|
Released |
| Oracle Linux 9 |
5.14.0-162.12.1.el9_1
show all
hide all
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1
5.14.0-284.11.1.el9_2
5.14.0-284.18.1.el9_2
5.14.0-284.25.1.0.1.el9_2
5.14.0-284.25.1.el9_2
5.14.0-284.30.0.1.el9_2
5.14.0-284.30.1.el9_2
5.14.0-362.13.0.1.el9_3
5.14.0-362.13.1.el9_3
5.14.0-362.18.0.1.el9_3
5.14.0-362.18.0.2.el9_3
5.14.0-362.18.1.el9_3
5.14.0-362.24.1.0.1.el9_3
5.14.0-362.24.1.0.2.el9_3
5.14.0-362.24.1.el9_3
5.14.0-362.8.1.el9_3
5.14.0-427.13.1.el9_4
5.14.0-427.16.1.el9_4
5.14.0-427.18.1.el9_4
5.14.0-427.20.1.el9_4
5.14.0-427.22.1.el9_4
5.14.0-427.24.1.el9_4
5.14.0-427.26.1.el9_4
5.14.0-427.28.1.el9_4
5.14.0-427.31.1.el9_4
5.14.0-427.33.1.el9_4
5.14.0-427.35.1.el9_4
5.14.0-427.37.1.el9_4
5.14.0-427.40.1.el9_4
5.14.0-427.42.1.el9_4
5.14.0-70.13.1.0.3.el9_0
5.14.0-70.17.1.0.1.el9_0
5.14.0-70.22.1.0.1.el9_0
5.14.0-70.26.1.0.1.el9_0
5.14.0-70.30.1.0.1.el9_0
|
Released |
| Rocky Linux 9 |
5.14.0-162.12.1.el9_1.0.1
show all
hide all
5.14.0-162.12.1.el9_1.0.2
5.14.0-162.18.1.el9_1
5.14.0-427.40.1.el9_4
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1.0.1
5.14.0-162.6.1.el9_1
5.14.0-284.30.1.el9_2
5.14.0-362.13.1.el9_3
5.14.0-362.18.1.el9_3.0.1
5.14.0-362.18.1.el9_3
5.14.0-362.24.1.el9_3.0.1
5.14.0-362.24.1.el9_3
5.14.0-362.8.1.el9_3
5.14.0-427.16.1.el9_4
5.14.0-427.18.1.el9_4
5.14.0-427.20.1.el9_4.0.1
5.14.0-427.20.1.el9_4
5.14.0-427.22.1.el9_4
5.14.0-427.24.1.el9_4
5.14.0-427.26.1.el9_4
5.14.0-427.28.1.el9_4
5.14.0-427.31.1.el9_4
5.14.0-427.33.1.el9_4
5.14.0-427.35.1.el9_4
5.14.0-427.37.1.el9_4
5.14.0-427.42.1.el9_4
5.14.0-70.22.1.el9_0
5.14.0-70.26.1.el9_0
5.14.0-70.30.1.el9_0
5.14.0-284.11.1.el9_2
5.14.0-427.13.1.el9_4
|
Released |
| AlmaLinux 9 |
5.14.0-70.30.1.el9_0
show all
hide all
5.14.0-162.12.1.el9_1
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1
5.14.0-284.11.1.el9_2
5.14.0-284.18.1.el9_2
5.14.0-284.25.1.el9_2
5.14.0-284.30.1.el9_2
5.14.0-362.13.1.el9_3
5.14.0-362.18.1.el9_3
5.14.0-362.24.1.el9_3
5.14.0-362.24.2.el9_3
5.14.0-362.8.1.el9_3
5.14.0-427.13.1.el9_4
5.14.0-427.16.1.el9_4
5.14.0-427.18.1.el9_4
5.14.0-427.20.1.el9_4
5.14.0-427.22.1.el9_4
5.14.0-427.24.1.el9_4
5.14.0-427.26.1.el9_4
5.14.0-427.28.1.el9_4
5.14.0-427.31.1.el9_4
5.14.0-427.33.1.el9_4
5.14.0-427.35.1.el9_4
5.14.0-427.37.1.el9_4
5.14.0-427.40.1.el9_4
5.14.0-427.42.1.el9_4
5.14.0-70.13.1.el9_0
5.14.0-70.17.1.el9_0
5.14.0-70.22.1.el9_0
5.14.0-70.26.1.el9_0
|
Released |
| Ubuntu 24.04 | |
Planned |