In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to just int.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-devel | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-awsUpgrade linux-kvmUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-raspi | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub