In the Linux kernel, the following vulnerability has been resolved:
netlabel: fix out-of-bounds memory accesses
There are two array out-of-bounds memory accesses, one in cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk(). Both errors are embarassingly simple, and the fixes are straightforward.
As a FYI for anyone backporting this patch to kernels prior to v4.8, you'll want to apply the netlbl_bitmap_walk() patch to cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before Linux v4.8.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-syms | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-fipsUpgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linuxUpgrade linux-oracle | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub