CVE-2024-42292: kobject_uevent: Fix OOB access within zap_modalias_env()
In the Linux kernel, the following vulnerability has been resolved:
kobjectuevent: Fix OOB access within zapmodaliasenv()
zapmodaliasenv() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42292?
CVE-2024-42292 has a medium severity rating due to its out-of-bounds access vulnerability in the Linux kernel.
How do I fix CVE-2024-42292?
To fix CVE-2024-42292, upgrade your Linux kernel to version 5.10.226-1 or later, or to any of the specified versions above.
Which Linux versions are affected by CVE-2024-42292?
Affected Linux kernel versions include all versions up to 5.10.223-1 and specific versions of 6.1 and 6.12.
What are the consequences of not patching CVE-2024-42292?
Not patching CVE-2024-42292 may lead to potential system instability or unauthorized memory access.
Who is affected by CVE-2024-42292?
Users and administrators running vulnerable versions of the Linux kernel on their systems are at risk with CVE-2024-42292.