CVE-2024-23307: Integer overflow in raid5_cache_count in Linux kernel
Published Jan 25, 2024
·Updated
Integer overflow in raid5cachecount in Linux kernel
Other sources
Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.
— Launchpad
Affected Software
12 affected componentsFixes available
Linux Linux kernel>=4.1<6.1.84
Linux Linux kernel>=6.2<6.6.24
Linux Linux kernel>=6.7<6.7.12
Linux Linux kernel>=6.8<6.8.3
IBM Security Verify Governance<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Software Stack<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager Virtual Appliance<=ISVG 10.0.2
IBM Security Verify Governance Identity Manager Container<=ISVG 10.0.2
debian/linux<=5.10.223-1, <=5.10.234-1
6.1.129-16.1.135-16.12.27-1
Microsoft azl3 kernel 6.6.64.2-2
Microsoft azl3 kernel 6.6.35.1-4
Microsoft cbl2 kernel 5.15.186.1-1
Remediation
Information
https://patchwork.kernel.org/project/linux-raid/patch/20240112071017.16313-1-2045gemini@gmail.com/ https://patchwork.kernel.org/project/linux-raid/patch/20240112071017.16313-1-2045gemini@gmail.com/
Event History
Jan 25, 2024
CVE Published
via MITRE·06:59 AM
Data Sourced
via MITRE·06:59 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Mar 4, 2024
Data Sourced
via Red Hat·03:12 PM
DescriptionSeverityAffected Software
Jun 8, 2024
Data Sourced
via Launchpad·12:59 AM
Description
Aug 15, 2024
Data Sourced
via Microsoft·12:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
May 2, 2025
Data Sourced
via Ubuntu·02:17 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23307?
The severity of CVE-2024-23307 is high due to its potential for causing forced integer overflow vulnerabilities in the Linux kernel.
2
How do I fix CVE-2024-23307?
To fix CVE-2024-23307, update the Linux kernel to version 6.1.123-1 or later on Debian systems.
3
What versions of the Linux kernel are affected by CVE-2024-23307?
CVE-2024-23307 affects Linux kernel versions from 4.1 up to but not including 6.2, 6.6.24, 6.7, and 6.8.3.
4
What types of systems are impacted by CVE-2024-23307?
CVE-2024-23307 impacts systems running the Linux kernel on x86 and ARM architectures.
5
What modules in the Linux kernel are involved in CVE-2024-23307?
CVE-2024-23307 specifically involves the md, raid, and raid5 modules of the Linux kernel.