In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to just int.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-azure-base | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linuxUpgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-aws-fips | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub