Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-58016

safesetid: check size of policy writes

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.235, 5.15.179, 6.1.129, 6.6.78, 6.12.14, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc. Check the size specified for write buffers before allocating. [PM: subject tweak]

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in 976284b94f2021df09829e37a367e19b84d9e5f3; From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in ecf6a4a558097920447a6fb84dfdb279e2ac749a; From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in a0dec65f88c8d9290dfa1d2ca1e897abe54c5881; From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in 96fae5bd1589731592d30b3953a90a77ef3928a6; From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in 36b385d0f2b4c0bf41d491e19075ecd990d2bf94; From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in c71d35676d46090c891b6419f253fb92a1a9f4eb; From aeca4e2ca65c1aeacfbe520684e6421719d99417 · fixed in f09ff307c7299392f1c88f763299e24bc99811c7

  • Linux Linux

    5.1

  • KernelLinux

    From 5.1.0 · fixed in 5.10.235; From 5.11.0 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.78; From 6.7.0 · fixed in 6.12.14; From 6.13.0 · fixed in 6.13.3

References 7

git.kernel.org