selinux: Add boundary check in put_entry()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.14.291, 4.19.256, 5.4.211, 5.10.137, 5.15.61, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: selinux: Add boundary check in put_entry() Just like next_entry(), boundary check is necessary to prevent memory out-of-bound access.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 2dabe6a872a5744865372eb30ea51e8ccd21305a; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 477722f31ad73aa779154d1d7e00825538389f76; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 90bdf50ae70c5571a277b5601e4f5df210831e0a; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in adbfdaacde18faf6cd4e490764045375266b3fbd; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 7363a69d8ca8f0086f8e1196c8ddaf0e168614b1; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 9605f50157cae00eb299e1189a6d708c84935ad8; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in dedd558d9765b72c66e5a53948e9f5abc3ece1f6; From cee74f47a6baba0ac457e87687fdcf0abd599f0a · fixed in 15ec76fb29be31df2bccb30fc09875274cba2776
- Linux Linux
2.6.37
- KernelLinux
From 2.6.37 · fixed in 4.14.291; From 4.15.0 · fixed in 4.19.256; From 4.20.0 · fixed in 5.4.211; From 5.5.0 · fixed in 5.10.137; From 5.11.0 · fixed in 5.15.61; From 5.16.0 · fixed in 5.18.18; From 5.19.0 · fixed in 5.19.2
References 8
git.kernel.org
- stable/c/2dabe6a872a5744865372eb30ea51e8ccd21305a
- stable/c/477722f31ad73aa779154d1d7e00825538389f76
- stable/c/90bdf50ae70c5571a277b5601e4f5df210831e0a
- stable/c/adbfdaacde18faf6cd4e490764045375266b3fbd
- stable/c/7363a69d8ca8f0086f8e1196c8ddaf0e168614b1
- stable/c/9605f50157cae00eb299e1189a6d708c84935ad8
- stable/c/dedd558d9765b72c66e5a53948e9f5abc3ece1f6
- stable/c/15ec76fb29be31df2bccb30fc09875274cba2776