In the Linux kernel, the following vulnerability has been resolved:
vduse: fix memory corruption in vduse_dev_ioctl()
The "config.offset" comes from the user. There needs to a check to prevent it being out of bounds. The "config.offset" and "dev->config_size" variables are both type u32. So if the offset if out of bounds then the "dev->config_size - config.offset" subtraction results in a very high u32 value. The out of bounds offset can result in memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub