CVE-2024-36025: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix off by one in qlaedifappgetstats()
The appreply->elem[] array is allocated earlier in this function and it has appreq.numports elements. Thus this > comparison needs to be >= to prevent memory corruption.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix off by one in qlaedifappgetstats()
The Linux kernel CVE team has assigned CVE-2024-36025 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053034-CVE-2024-36025-95e0@gregkh/T
— Red Hat
Linux Kernel is vulnerable to a denial of service, caused by an off-by-one in qlaedifappgetstats(). A local authenticated attacker could exploit this vulnerability to cause a denial of service.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36025?
CVE-2024-36025 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-36025?
To remediate CVE-2024-36025, update your Linux kernel to one of the following versions: 5.15.156, 6.1.87, 6.6.28, 6.8.7, 6.9, or relevant patched versions from Debian.
What are the affected systems for CVE-2024-36025?
CVE-2024-36025 affects multiple Linux kernel versions across Red Hat and Debian distributions.
What is the exploit nature of CVE-2024-36025?
CVE-2024-36025 relates to an off-by-one error in the qla_edif_app_getstats() function of the Linux kernel, impacting memory handling.
Is there a known workaround for CVE-2024-36025?
There is no recommended workaround for CVE-2024-36025; updating to a secure version is the best approach.