Debian: CVE-2024-41028: linux, linux-6.1 -- security update

Debian: CVE-2024-41028: linux, linux-6.1 -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/29/2024

Created

09/03/2024

Added

09/02/2024

Modified

01/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_quirks[] together with the standard DMI matching functions, it must be terminated by a empty entry. Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed. Fix this by adding the terminating empty entry.

Solution(s)

• debian-upgrade-linux
• debian-upgrade-linux-6-1

References

• https://attackerkb.com/topics/cve-2024-41028
• CVE - 2024-41028
• DLA-4008-1