In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to just int.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-azure | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-fips | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub