Name: CVE-2024-25739: Improper Check for Unusual or Exceptional Conditions
Creator: Rapid7
Published: 2024-02-12T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2024-25739, CWE-754, CVSS 5.5, EPSS 0.00248

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-debug	Aug 12, 2024	Feb 12, 2024
Amazon Linux Ami 2	—	Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.345-262.561	Jul 9, 2024	Feb 12, 2024
Debian	—	Upgrade linux	Jun 27, 2024	Feb 12, 2024
Huawei Euleros 2_0_sp10	—	Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools	Oct 8, 2024	Feb 12, 2024
Huawei Euleros 2_0_sp11	—	Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists	Jun 26, 2024	Feb 12, 2024
Huawei Euleros 2_0_sp12	—	Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools	Oct 8, 2024	Feb 12, 2024
Huawei Euleros 2_0_sp8	—	Upgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers	Jul 23, 2024	Feb 12, 2024
Huawei Euleros 2_0_sp9	—	Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools	Nov 11, 2024	Feb 12, 2024
Oracle_linux	—	Upgrade kernelUpgrade kernel-uek	Aug 16, 2024	Feb 12, 2024
Redhat_linux	—	Upgrade kernel-rtUpgrade kernelNo solution exists	Aug 12, 2024	Feb 12, 2024
Rocky_linux	—	Upgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade bpftool	Aug 22, 2024	Feb 12, 2024
Suse	—	Upgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-default	Apr 18, 2024	Feb 12, 2024
Ubuntu	—	Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibmUpgrade linux-image-bluefieldUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.5.0-1024-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.5.0-1024-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-45-lowlatency-64kUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-4.4.0-1172-awsUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.5.0-45-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1170-awsUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1112-raspi	Jul 1, 2024	Feb 12, 2024
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Feb 12, 2024

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence