Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
A static code analysis tool flagged the possibility of buffer overflow when using copy_from_user() for a debugfs entry.
Currently, it is possible that copy_from_user() copies more bytes than what would fit in the mybuf char array. Add a min() restriction check between sizeof(mybuf) - 1 and nbytes passed from the userspace buffer to protect against buffer overflow.
Details
- Affected product:
- AlmaLinux 9.2 ESU , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , TuxCare 9.6 ESU
- Affected packages:
- kernel @ 4.18.0 (+4 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 9.2 ESU | Released |
14 kernels
|
| Amazon Linux 2 5.10 | Planned | — |
| Amazon Linux 2 5.4 | Planned | — |
| Debian 11 | Planned | — |
| Debian 12 | Planned | — |
| RHEL 8 | Planned | — |
| RHEL 9 | Will Not Fix | — |
| Ubuntu 20.04 | Planned | — |
| Ubuntu 22.04 | Planned | — |