CVE-2024-46684

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46684

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: fix AUXV size calculation when ELF_HWCAP2 is defined create_elf_fdpic_tables() does not correctly account the space for the AUX vector when an architecture has ELF_HWCAP2 defined. Prior to the commit 10e29251be0e ("binfmt_elf_fdpic: fix /proc/<pid>/auxv") it resulted in the last entry of the AUX vector being set to zero, but with that change it results in a kernel BUG. Fix that by adding one to the number of AUXV entries (nitems) when ELF_HWCAP2 is defined.

References
Link Resource
https://git.kernel.org/stable/c/c507da85e4f80c630deb9e98222ccf4118cbe6f8 Patch
https://git.kernel.org/stable/c/c6a09e342f8e6d3cac7f7c5c14085236aca284b9 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
History

19 Sep 2024, 18:04

Type Values Removed Values Added
CWE CWE-131
CPE cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/c507da85e4f80c630deb9e98222ccf4118cbe6f8 - () https://git.kernel.org/stable/c/c507da85e4f80c630deb9e98222ccf4118cbe6f8 - Patch
References () https://git.kernel.org/stable/c/c6a09e342f8e6d3cac7f7c5c14085236aca284b9 - () https://git.kernel.org/stable/c/c6a09e342f8e6d3cac7f7c5c14085236aca284b9 - Patch

13 Sep 2024, 14:06

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: binfmt_elf_fdpic: se corrige el cálculo del tamaño de AUXV cuando se define ELF_HWCAP2 create_elf_fdpic_tables() no tiene en cuenta correctamente el espacio para el vector AUX cuando una arquitectura tiene definido ELF_HWCAP2. Antes del commit 10e29251be0e ("binfmt_elf_fdpic: fix /proc//auxv"), esto provocaba que la última entrada del vector AUX se estableciera en cero, pero con ese cambio se produce un ERROR del kernel. Corrija esto añadiendo uno al número de entradas AUXV (nitems) cuando se define ELF_HWCAP2.

13 Sep 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-13 06:15

Updated : 2024-09-19 18:04

NVD link : CVE-2024-46684

Mitre link : CVE-2024-46684

CVE.ORG link : CVE-2024-46684

JSON object : View

Products Affected

linux

CWE
CWE-131

Incorrect Calculation of Buffer Size