In the Linux kernel, the following vulnerability has been resolved:
net: dsa: fix a crash if ->get_sset_count() fails
If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes.
Fix this by checking for error codes and changing the type of "i" to just int.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-source-azure | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4 | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub