Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-42292

kobject_uevent: Fix OOB access within zap_modalias_env()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.320, 5.4.282, 5.10.224, 5.15.165, 6.1.103, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in 81a15d28f32af01493ae8c5457e0d55314a4167d; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in b59a5e86a3934f1b6a5bd1368902dbc79bdecc90; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in 648d5490460d38436640da0812bf7f6351c150d2; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in c5ee8adc8d98a49703320d13878ba2b923b142f5; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in 68d63ace80b76395e7935687ecdb86421adc2168; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in 57fe01d3d04276875c7e3a6dc763517fc05b8762; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in d4663536754defff75ff1eca0aaebc41da165a8d; From 9b3fa47d4a76b1d606a396455f9bbeee083ef008 · fixed in dd6e9894b451e7c85cceb8e9dc5432679a70e7dc

  • Linux Linux

    4.15

  • KernelLinux

    From 4.15.0 · fixed in 4.19.320; From 4.20.0 · fixed in 5.4.282; From 5.5.0 · fixed in 5.10.224; From 5.11.0 · fixed in 5.15.165; From 5.16.0 · fixed in 6.1.103; From 6.2.0 · fixed in 6.6.44; From 6.7.0 · fixed in 6.10.3

References 8

git.kernel.org