CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media
Published Aug 17, 2024
·Updated
block: initialize integrity buffer to zero before writing it to media
Affected Software
13 affected componentsFixes available
Linux Linux kernel>=2.6.27<5.15.165
Linux Linux kernel>=5.16<6.1.103
Linux Linux kernel>=6.2<6.6.44
Linux Linux kernel>=6.7<6.10.3
debian/linux<=5.10.223-1
5.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
debian/linux-6.1
6.1.129-1~deb11u1
IBM Security Verify Governance<=ISVG 10.0.2
IBM Security Verify Governance - Identity Manager virtual appliance component<=ISVG 10.0.2
Microsoft cbl2 kernel 5.15.164.1-1
Microsoft azl3 kernel 6.6.43.1-7
Microsoft cbl2 kernel 5.15.164.1-1
Microsoft azl3 kernel 6.6.47.1-1
Microsoft cbl2 kernel 5.15.167.1-1
Remediation
Event History
Aug 17, 2024
CVE Published
via MITRE·09:22 AM
Data Sourced
via MITRE·09:22 AM
Description
Data Sourced
via NVD·10:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 11, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Apr 27, 2025
Data Sourced
via Ubuntu·12:34 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-43854?
The severity of CVE-2024-43854 is high due to the potential for uninitialized kernel memory being written to media.
2
How do I fix CVE-2024-43854?
To fix CVE-2024-43854, ensure that your Linux kernel is updated to version 5.10.226-1 or higher, 6.1.123-1 or higher, or another appropriate remedied version.
3
Which versions of Linux are affected by CVE-2024-43854?
CVE-2024-43854 affects Linux kernel versions prior to 5.10.226-1, 6.1.123-1, and several other versions specified in the remedy.
4
What types of systems are vulnerable to CVE-2024-43854?
Systems running vulnerable versions of the Linux kernel as specified in the remedy section are susceptible to CVE-2024-43854.
5
Is there a permanent solution for CVE-2024-43854?
The permanent solution for CVE-2024-43854 is to upgrade your Linux kernel to a version that includes the patch for this vulnerability.