In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to just int.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-docs | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-kvmUpgrade linux-azure-4.15Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-gcp-4.15Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-hweUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub