Red Hat: CVE-2024-38619: kernel: usb-storage: alauda: Check whether the media is initialized (Multiple Advisories)

Red Hat: CVE-2024-38619: kernel: usb-storage: alauda: Check whether the media is initialized (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

06/20/2024

Created

09/26/2024

Added

09/25/2024

Modified

12/05/2024

Description

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media().

Solution(s)

• redhat-upgrade-kernel
• redhat-upgrade-kernel-rt

References

• CVE-2024-38619
• RHSA-2024:6567
• RHSA-2024:7000
• RHSA-2024:7001