Updated:
Description:
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Enforce hcall result buffer validity and size plpar_hcall(), plpar_hcall9(), and related functions expect callers to provide valid result buffers of certain minimum size. Currently this is communicated only through comments in the code and the compiler has no idea. For example, if I write a bug like this: long retbuf[PLPAR_HCALL_BUFSIZE]; // should be PLPAR_HCALL9_BUFSIZE plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, ...); This compiles with no diagnostics emitted, but likely results in stack corruption at runtime when plpar_hcall9() stores results past the end of the array. (To be clear this is a contrived example and I have not found a real instance yet.) To make this class of error less likely, we can use explicitly-sized array parameters instead of pointers in the declarations for the hcall APIs. When compiled with -Warray-bounds[1], the code above now provokes a diagnostic like this: error: array argument is too small; is of size 32, callee requires at least 72 [-Werror,-Warray-bounds] 60 | plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, | ^ ~~~~~~ [1] Enabled for LLVM builds but not GCC for now. See commit 0da6e5fd6c37 ("gcc: disable '-Warray-bounds' for gcc-13 too") and related changes.
CVSS3: 5.5
| OS | Vendor version | Errata |
|---|---|---|
| RHEL 8 | 4.18.0-553.16.1.el8_10 | RHSA-2024:5101 |
| Oracle Linux 7 UEK 5 | 4.14.35-2047.541.4.1.el7uek | ELSA-2024-12779 |
| Oracle Linux 8 | 4.18.0-553.16.1.el8_10 | ELSA-2024-5101 |
| Ubuntu 20.04 | 5.4.0-195.215 | USN-7003-1 |
| Oracle Linux 8 UEK 6 | 5.4.17-2136.335.4.el8uek | ELSA-2024-12610 |
| Ubuntu 20.04 AWS | 5.4.0-1132.142 | USN-7003-1 |
| AlmaLinux 8 | 4.18.0-553.16.1.el8_10 | ALSA-2024:5101 |
| Ubuntu 20.04 Azure | 5.4.0-1137.144 | USN-7003-1 |
| Rocky Linux 8 | 4.18.0-553.16.1.el8_10 | RLSA-2024:5101 |
| Debian 11 | 5.10.221-1 | DSA-5730-1 |
| Ubuntu 22.04 | 5.15.0-121.131 | USN-7007-1 |
| Ubuntu 22.04 AWS | 5.15.0-1069.75 | USN-7007-1 |
| Ubuntu 22.04 Azure | 5.15.0-1072.81 | USN-7009-1 |
| Debian 11 cloud | 5.10.221-1 | DSA-5730-1 |
| Ubuntu 20.04 HWE AWS | 5.15.0-1069.75~20.04.1 | USN-7007-1 |
| Ubuntu 20.04 HWE Azure | 5.15.0-1072.81~20.04.1 | USN-7009-1 |
| Ubuntu 20.04 GCP | 5.4.0-1136.145 | USN-7003-1 |
| Oracle Linux 9 UEK 7 | 5.15.0-210.163.7.el9uek | ELSA-2024-12618 |
| Oracle Linux 8 UEK 7 | 5.15.0-210.163.7.el8uek | ELSA-2024-12618 |
| Debian 12 | 6.1.99-1 | DSA-5731-1 |
| Ubuntu 24.04 | 6.8.0-44.44 | USN-6999-1 |
| OS | Original kernel version | State |
|---|---|---|
| Ubuntu 18.04 HWE Focal | |
Planned |
| RHEL 8 |
4.18.0-147.el8
show all
hide all
4.18.0-80.11.1.el8_0
4.18.0-80.4.2.el8_0
4.18.0-80.11.2.el8_0
4.18.0-80.7.2.el8_0
4.18.0-80.7.1.el8_0
4.18.0-147.0.2.el8_1
4.18.0-80.1.2.el8_0
4.18.0-147.0.3.el8_1
4.18.0-80.el8
4.18.0-147.5.1.el8_1
4.18.0-147.3.1.el8_1
4.18.0-147.8.1.el8_1
4.18.0-193.el8
4.18.0-193.1.2.el8_2
4.18.0-193.6.3.el8_2
4.18.0-193.13.2.el8_2
4.18.0-193.14.3.el8_2
4.18.0-193.19.1.el8_2
4.18.0-193.28.1.el8_2
4.18.0-240.el8
4.18.0-240.1.1.el8_3
4.18.0-240.8.1.el8_3
4.18.0-240.10.1.el8_3
4.18.0-240.15.1.el8_3
4.18.0-240.22.1.el8_3
4.18.0-305.el8
4.18.0-305.3.1.el8_4
4.18.0-305.7.1.el8_4
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-348.el8
4.18.0-348.2.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.12.2.el8_5
4.18.0-348.20.1.el8_5
4.18.0-372.9.1.el8
4.18.0-348.23.1.el8_5
4.18.0-372.13.1.el8_6
4.18.0-372.16.1.el8_6
4.18.0-372.19.1.el8_6
4.18.0-372.26.1.el8_6
4.18.0-372.32.1.el8_6
4.18.0-425.3.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-513.5.1.el8_9
4.18.0-513.9.1.el8_9
4.18.0-513.11.1.el8_9
4.18.0-513.18.1.el8_9
4.18.0-513.24.1.el8_9
4.18.0-553.el8_10
4.18.0-553.5.1.el8_10
4.18.0-553.8.1.el8_10
|
Will Not Fix |
| Oracle Linux 7 UEK 5 | |
Planned |
| Oracle Linux 8 |
4.18.0-147.el8
show all
hide all
4.18.0-80.11.1.el8_0
4.18.0-80.4.2.el8_0
4.18.0-147.5.1.el8_1
4.18.0-80.11.2.el8_0
4.18.0-80.7.2.el8_0
4.18.0-80.7.1.el8_0
4.18.0-147.0.2.el8_1
4.18.0-80.1.2.el8_0
4.18.0-147.0.3.el8_1
4.18.0-147.3.1.el8_1
4.18.0-80.el8
4.18.0-147.8.1.el8_1
4.18.0-193.1.2.el8_2
4.18.0-193.el8
4.18.0-193.6.3.el8_2
4.18.0-193.13.2.el8_2
4.18.0-193.14.3.el8_2
4.18.0-193.19.1.el8_2
4.18.0-193.28.1.el8_2
4.18.0-240.el8
4.18.0-240.1.1.el8_3
4.18.0-240.8.1.el8_3
4.18.0-240.10.1.el8_3
4.18.0-240.15.1.el8_3
4.18.0-240.22.1.el8_3
4.18.0-305.el8
4.18.0-305.3.1.el8_4
4.18.0-305.7.1.el8_4
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-348.el8
4.18.0-348.2.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.12.2.el8_5
4.18.0-348.20.1.el8_5
4.18.0-348.23.1.el8_5
4.18.0-372.9.1.el8
4.18.0-372.13.1.0.1.el8_6
4.18.0-372.16.1.0.1.el8_6
4.18.0-372.19.1.0.1.el8_6
4.18.0-372.26.1.0.1.el8_6
4.18.0-372.32.1.0.1.el8_6
4.18.0-425.3.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.0.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-513.5.1.el8_9
4.18.0-513.9.1.el8_9
4.18.0-513.11.0.1.el8_9
4.18.0-513.18.0.1.el8_9
4.18.0-513.18.0.2.el8_9
4.18.0-513.18.1.el8_9
4.18.0-513.18.1.0.1.el8_9
4.18.0-513.24.1.el8_9
4.18.0-553.el8_10
4.18.0-553.5.1.el8_10
4.18.0-553.8.1.el8_10
|
Will Not Fix |
| Ubuntu 20.04 | |
Planned |
| Oracle Linux 8 UEK 6 |
5.4.17-2011.2.2.el8uek
show all
hide all
5.4.17-2011.1.2.el8uek
5.4.17-2011.3.2.1.el8uek
5.4.17-2011.0.7.el8uek
5.4.17-2011.4.4.el8uek
5.4.17-2011.4.6.el8uek
5.4.17-2011.5.3.el8uek
5.4.17-2011.6.2.el8uek
5.4.17-2011.7.4.el8uek
5.4.17-2036.100.6.1.el8uek
5.4.17-2036.101.2.el8uek
5.4.17-2036.102.0.2.el8uek
5.4.17-2036.103.3.el8uek
5.4.17-2036.103.3.1.el8uek
5.4.17-2036.104.4.el8uek
5.4.17-2036.104.5.el8uek
5.4.17-2102.200.13.el8uek
5.4.17-2102.201.3.el8uek
5.4.17-2102.202.5.el8uek
5.4.17-2102.203.5.el8uek
5.4.17-2102.203.6.el8uek
5.4.17-2102.204.4.2.el8uek
5.4.17-2102.204.4.3.el8uek
5.4.17-2102.204.4.4.el8uek
5.4.17-2102.205.7.2.el8uek
5.4.17-2102.205.7.3.el8uek
5.4.17-2102.206.1.el8uek
5.4.17-2136.300.7.el8uek
5.4.17-2136.301.1.2.el8uek
5.4.17-2136.301.1.4.el8uek
5.4.17-2136.302.6.1.el8uek
5.4.17-2136.302.7.2.el8uek
5.4.17-2136.302.7.2.1.el8uek
5.4.17-2136.301.1.3.el8uek
5.4.17-2136.302.7.2.2.el8uek
5.4.17-2136.302.7.2.3.el8uek
5.4.17-2136.304.4.1.el8uek
5.4.17-2136.304.4.2.el8uek
5.4.17-2136.304.4.3.el8uek
5.4.17-2136.304.4.4.el8uek
5.4.17-2136.304.4.5.el8uek
5.4.17-2136.305.5.3.el8uek
5.4.17-2136.305.5.4.el8uek
5.4.17-2136.305.5.5.el8uek
5.4.17-2136.306.1.3.el8uek
5.4.17-2136.307.3.1.el8uek
5.4.17-2136.307.3.2.el8uek
5.4.17-2136.307.3.4.el8uek
5.4.17-2136.307.3.5.el8uek
5.4.17-2136.308.7.el8uek
5.4.17-2136.307.3.6.el8uek
5.4.17-2136.308.9.el8uek
5.4.17-2136.309.5.el8uek
5.4.17-2136.309.5.1.el8uek
5.4.17-2136.310.7.el8uek
5.4.17-2136.310.7.1.el8uek
5.4.17-2136.309.4.el8uek
5.4.17-2136.311.6.el8uek
5.4.17-2136.311.6.1.el8uek
5.4.17-2136.312.3.4.el8uek
5.4.17-2136.313.6.el8uek
5.4.17-2136.314.6.2.el8uek
5.4.17-2136.314.6.3.el8uek
5.4.17-2136.315.5.el8uek
5.4.17-2136.316.7.el8uek
5.4.17-2136.315.5.8.el8uek
5.4.17-2136.317.5.3.el8uek
5.4.17-2136.317.5.5.el8uek
5.4.17-2136.318.7.1.el8uek
5.4.17-2136.318.7.2.el8uek
5.4.17-2136.319.1.2.el8uek
5.4.17-2136.319.1.3.el8uek
5.4.17-2136.319.1.4.el8uek
5.4.17-2136.320.7.el8uek
5.4.17-2136.320.7.1.el8uek
5.4.17-2136.321.4.el8uek
5.4.17-2136.321.4.1.el8uek
5.4.17-2136.322.6.2.el8uek
5.4.17-2136.323.8.el8uek
5.4.17-2136.323.8.1.el8uek
5.4.17-2136.323.8.2.el8uek
5.4.17-2136.324.5.2.el8uek
5.4.17-2136.324.5.3.el8uek
5.4.17-2136.322.6.3.el8uek
5.4.17-2136.325.5.el8uek
5.4.17-2136.325.5.1.el8uek
5.4.17-2136.326.6.el8uek
5.4.17-2136.326.6.1.el8uek
5.4.17-2136.327.2.el8uek
5.4.17-2136.328.3.el8uek
5.4.17-2136.329.3.1.el8uek
5.4.17-2136.322.6.4.el8uek
5.4.17-2136.329.3.2.el8uek
5.4.17-2136.330.7.1.el8uek
5.4.17-2136.331.7.el8uek
5.4.17-2136.322.6.5.el8uek
5.4.17-2136.330.7.4.el8uek
5.4.17-2136.332.5.2.el8uek
5.4.17-2136.333.5.el8uek
5.4.17-2136.330.7.5.el8uek
5.4.17-2136.333.5.1.el8uek
5.4.17-2136.334.6.el8uek
5.4.17-2136.334.6.1.el8uek
|
Will Not Fix |
| Ubuntu 18.04 AWS Focal | |
Planned |
| Ubuntu 18.04 Azure Focal | |
Planned |
| Ubuntu 20.04 AWS | |
Planned |
| AlmaLinux 8 |
4.18.0-240.el8
show all
hide all
4.18.0-240.15.1.el8_3
4.18.0-240.22.1.el8_3
4.18.0-305.el8
4.18.0-305.3.1.el8_4
4.18.0-305.7.1.el8_4
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-348.el8
4.18.0-348.2.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.12.2.el8_5
4.18.0-348.20.1.el8_5
4.18.0-348.20.1.el8.fscrypt
4.18.0-348.23.1.el8_5
4.18.0-372.9.1.el8
4.18.0-372.13.1.el8_6
4.18.0-372.19.1.el8_6
4.18.0-372.16.1.el8_6
4.18.0-372.26.1.el8_6
4.18.0-372.32.1.el8_6
4.18.0-425.3.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-513.5.1.el8_9
4.18.0-513.9.1.el8_9
4.18.0-477.27.2.el8_8
4.18.0-513.11.1.el8_9
4.18.0-513.18.1.el8_9
4.18.0-513.24.1.el8_9
4.18.0-513.18.2.el8_9
4.18.0-553.el8_10
4.18.0-553.5.1.el8_10
4.18.0-553.8.1.el8_10
|
Will Not Fix |
| Ubuntu 20.04 Azure | |
Planned |
| Rocky Linux 8 |
4.18.0-305.3.1.el8_4
show all
hide all
4.18.0-305.7.1.el8_4
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-348.2.1.el8_5
4.18.0-348.12.2.el8_5
4.18.0-348.20.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.23.1.el8_5
4.18.0-372.9.1.el8
4.18.0-372.13.1.el8_6
4.18.0-372.19.1.el8_6
4.18.0-372.16.1.el8_6
4.18.0-372.16.1.el8_6.0.1
4.18.0-372.26.1.el8_6
4.18.0-372.32.1.el8_6
4.18.0-425.3.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-513.5.1.el8_9
4.18.0-513.9.1.el8_9
4.18.0-513.11.1.el8_9
4.18.0-513.18.1.el8_9
4.18.0-513.11.1.el8_9.0.1
4.18.0-513.24.1.el8_9
4.18.0-553.el8_10
4.18.0-553.5.1.el8_10
4.18.0-553.8.1.el8_10
|
Will Not Fix |
| Debian 11 | |
In Progress |
| Ubuntu 22.04 | |
In Progress |
| Ubuntu 22.04 AWS | |
In Progress |
| Ubuntu 22.04 Azure | |
Planned |
| Debian 11 cloud | |
In Progress |
| Ubuntu 20.04 HWE AWS | |
In Progress |
| Ubuntu 20.04 HWE Azure | |
Planned |
| Ubuntu 20.04 GCP | |
Planned |
| Oracle Linux 9 UEK 7 | |
Planned |
| Oracle Linux 8 UEK 7 | |
Planned |
| Debian 12 | |
Planned |
| Ubuntu 24.04 | |
Planned |