跳转到帖子

Red Hat: CVE-2024-36957: kernel: octeontx2-af: avoid off-by-one read from userspace (Multiple Advisories)

recommended_posts

发布于
  • Members

Red Hat: CVE-2024-36957: kernel: octeontx2-af: avoid off-by-one read from userspace (Multiple Advisories)

Severity
4
CVSS
(AV:L/AC:L/Au:M/C:C/I:N/A:N)
Published
05/30/2024
Created
06/28/2024
Added
06/27/2024
Modified
12/05/2024

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We try to access count + 1 byte from userspace with memdup_user(buffer, count + 1). However, the userspace only provides buffer of count bytes and only these count bytes are verified to be okay to access. To ensure the copied buffer is NUL terminated, we use memdup_user_nul instead.

Solution(s)

  • redhat-upgrade-kernel
  • redhat-upgrade-kernel-rt

References

  • CVE-2024-36957
  • RHSA-2024:4106
  • RHSA-2024:4108
  • RHSA-2024:4583
  • 查看数 700
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…