vulnerability

Ubuntu: (Multiple Advisories) (CVE-2024-36016): Linux kernel vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:N/A:C)
Published
05/29/2024
Added
07/31/2024
Modified
02/18/2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: n_gsm: fix possible out-of-bounds in gsm0_receive()

Assuming the following:
- side A configures the n_gsm in basic option mode
- side B sends the header of a basic option mode frame with data length 1
- side A switches to advanced option mode
- side B sends 2 data bytes which exceeds gsm->len
Reason: gsm->len is not used in advanced option mode.
- side A switches to basic option mode
- side B keeps sending until gsm0_receive() writes past gsm->buf
Reason: Neither gsm->state nor gsm->len have been reset after
reconfiguration.

Fix this by changing gsm->count to gsm->len comparison from equal to less
than. Also add upper limit checks against the constant MAX_MRU in
gsm0_receive() and gsm1_receive() to harden against memory corruption of
gsm->len and gsm->mru.

All other checks remain as we still need to limit the data according to the
user configuration and actual payload size.

Solution(s)

ubuntu-upgrade-linux-image-4-15-0-1133-oracleubuntu-upgrade-linux-image-4-15-0-1154-kvmubuntu-upgrade-linux-image-4-15-0-1164-gcpubuntu-upgrade-linux-image-4-15-0-1170-awsubuntu-upgrade-linux-image-4-15-0-1179-azureubuntu-upgrade-linux-image-4-15-0-227-genericubuntu-upgrade-linux-image-4-15-0-227-lowlatencyubuntu-upgrade-linux-image-4-4-0-1134-awsubuntu-upgrade-linux-image-4-4-0-1135-kvmubuntu-upgrade-linux-image-4-4-0-1172-awsubuntu-upgrade-linux-image-4-4-0-257-genericubuntu-upgrade-linux-image-4-4-0-257-lowlatencyubuntu-upgrade-linux-image-5-15-0-1035-xilinx-zynqmpubuntu-upgrade-linux-image-5-15-0-1049-gkeopubuntu-upgrade-linux-image-5-15-0-1059-ibmubuntu-upgrade-linux-image-5-15-0-1059-raspiubuntu-upgrade-linux-image-5-15-0-1061-intel-iotgubuntu-upgrade-linux-image-5-15-0-1061-nvidiaubuntu-upgrade-linux-image-5-15-0-1061-nvidia-lowlatencyubuntu-upgrade-linux-image-5-15-0-1063-gkeubuntu-upgrade-linux-image-5-15-0-1063-kvmubuntu-upgrade-linux-image-5-15-0-1064-oracleubuntu-upgrade-linux-image-5-15-0-1065-gcpubuntu-upgrade-linux-image-5-15-0-1065-oracleubuntu-upgrade-linux-image-5-15-0-1066-awsubuntu-upgrade-linux-image-5-15-0-1070-azureubuntu-upgrade-linux-image-5-15-0-1070-azure-fdeubuntu-upgrade-linux-image-5-15-0-117-genericubuntu-upgrade-linux-image-5-15-0-117-generic-64kubuntu-upgrade-linux-image-5-15-0-117-generic-lpaeubuntu-upgrade-linux-image-5-15-0-117-lowlatencyubuntu-upgrade-linux-image-5-15-0-117-lowlatency-64kubuntu-upgrade-linux-image-5-4-0-1041-iotubuntu-upgrade-linux-image-5-4-0-1048-xilinx-zynqmpubuntu-upgrade-linux-image-5-4-0-1076-ibmubuntu-upgrade-linux-image-5-4-0-1089-bluefieldubuntu-upgrade-linux-image-5-4-0-1096-gkeopubuntu-upgrade-linux-image-5-4-0-1113-raspiubuntu-upgrade-linux-image-5-4-0-1114-raspiubuntu-upgrade-linux-image-5-4-0-1117-kvmubuntu-upgrade-linux-image-5-4-0-1129-awsubuntu-upgrade-linux-image-5-4-0-1129-oracleubuntu-upgrade-linux-image-5-4-0-1133-gcpubuntu-upgrade-linux-image-5-4-0-1134-azureubuntu-upgrade-linux-image-5-4-0-190-genericubuntu-upgrade-linux-image-5-4-0-190-generic-lpaeubuntu-upgrade-linux-image-5-4-0-190-lowlatencyubuntu-upgrade-linux-image-6-8-0-1007-gkeubuntu-upgrade-linux-image-6-8-0-1008-raspiubuntu-upgrade-linux-image-6-8-0-1009-ibmubuntu-upgrade-linux-image-6-8-0-1009-oemubuntu-upgrade-linux-image-6-8-0-1010-nvidiaubuntu-upgrade-linux-image-6-8-0-1010-nvidia-64kubuntu-upgrade-linux-image-6-8-0-1010-oracleubuntu-upgrade-linux-image-6-8-0-1010-oracle-64kubuntu-upgrade-linux-image-6-8-0-1011-gcpubuntu-upgrade-linux-image-6-8-0-1011-nvidia-lowlatencyubuntu-upgrade-linux-image-6-8-0-1011-nvidia-lowlatency-64kubuntu-upgrade-linux-image-6-8-0-1012-awsubuntu-upgrade-linux-image-6-8-0-1012-azureubuntu-upgrade-linux-image-6-8-0-1012-azure-fdeubuntu-upgrade-linux-image-6-8-0-39-genericubuntu-upgrade-linux-image-6-8-0-39-generic-64kubuntu-upgrade-linux-image-6-8-0-39-lowlatencyubuntu-upgrade-linux-image-6-8-0-39-lowlatency-64kubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-cvmubuntu-upgrade-linux-image-azure-fdeubuntu-upgrade-linux-image-azure-fde-lts-22-04ubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-bluefieldubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-gcp-lts-22-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-64k-hwe-24-04ubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-24-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-classicubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-ibm-lts-24-04ubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-intel-iotgubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-nvidiaubuntu-upgrade-linux-image-nvidia-64kubuntu-upgrade-linux-image-nvidia-lowlatencyubuntu-upgrade-linux-image-nvidia-lowlatency-64kubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-20-04cubuntu-upgrade-linux-image-oem-20-04dubuntu-upgrade-linux-image-oem-24-04ubuntu-upgrade-linux-image-oem-24-04aubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-64kubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-oracle-lts-22-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04ubuntu-upgrade-linux-image-virtual-hwe-24-04ubuntu-upgrade-linux-image-virtual-lts-xenialubuntu-upgrade-linux-image-xilinx-zynqmp
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.