CVE-2024-36978

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36978
In the Linux kernel, the following vulnerability has been resolved: net: sched: sch_multiq: fix possible OOB write in multiq_tune() q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 Patch
https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f Patch
https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e Patch
https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 Patch
https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d Patch
https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d Patch
https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 Patch
https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 Patch
https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f Patch
https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e Patch
https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 Patch
https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d Patch
https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d Patch
https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
History

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 - Patch () https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 - Patch
References () https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f - Patch () https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f - Patch
References () https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e - Patch () https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e - Patch
References () https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 - Patch () https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 - Patch
References () https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d - Patch () https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d - Patch
References () https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d - Patch () https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d - Patch
References () https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 - Patch () https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 - Patch

19 Aug 2024, 18:31

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 - () https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 - Patch
References () https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f - () https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f - Patch
References () https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e - () https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e - Patch
References () https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 - () https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 - Patch
References () https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d - () https://git.kernel.org/stable/c/affc18fdc694190ca7575b9a86632a73b9fe043d - Patch
References () https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d - () https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d - Patch
References () https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 - () https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-787

05 Jul 2024, 08:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/52b1aa07cda6a199cd6754d3798c7759023bc70f -
  • () https://git.kernel.org/stable/c/598572c64287aee0b75bbba4e2881496878860f3 -
  • () https://git.kernel.org/stable/c/d5d9d241786f49ae7cbc08e7fc95a115e9d80f3d -

21 Jun 2024, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0f208fad86631e005754606c3ec80c0d44a11882 -
  • () https://git.kernel.org/stable/c/54c2c171c11a798fe887b3ff72922aa9d1411c1e -
  • () https://git.kernel.org/stable/c/d6fb5110e8722bc00748f22caeb650fe4672f129 -

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: sched: sch_multiq: corrige posible escritura OOB en multiq_tune() q->bands se asignarán a qopt->bands para ejecutar la lógica de código posterior después de kmalloc. Por lo tanto, las antiguas q->bands no deberían usarse en kmalloc. De lo contrario, se producirá una escritura fuera de los límites.

19 Jun 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-19 07:15

Updated : 2024-11-21 09:22

NVD link : CVE-2024-36978

Mitre link : CVE-2024-36978

CVE.ORG link : CVE-2024-36978

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024