Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-38659— enic: Validate length of nl attributes in enic_set_vf_port

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于enic模块没有验证enic_set_vf_port中nl属性的长度。

CVSS 7.3 · High EPSS 0.24% · P15

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux f8bd909183acffad68780b10c1cdf36161cfd5d1< 2b649d7e0cb42a660f0260ef25fd55fdc9c6c600 affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< ca63fb7af9d3e531aa25f7ae187bfc6c7166ec2d affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< 3c0d36972edbe56fcf98899622d9b90ac9965227 affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< 25571a12fbc8a1283bd8380d461267956fd426f7 affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< 7077c22f84f41974a711604a42fd0e0684232ee5 affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< f6638e955ca00c489894789492776842e102af9c affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< aee1955a1509a921c05c70dad5d6fc8563dfcb31 affected
f8bd909183acffad68780b10c1cdf36161cfd5d1< e8021b94b0412c37bcc79027c2e382086b6ce449 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-38659

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
enic: Validate length of nl attributes in enic_set_vf_port
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: enic: Validate length of nl attributes in enic_set_vf_port enic_set_vf_port assumes that the nl attribute IFLA_PORT_PROFILE is of length PORT_PROFILE_MAX and that the nl attributes IFLA_PORT_INSTANCE_UUID, IFLA_PORT_HOST_UUID are of length PORT_UUID_MAX. These attributes are validated (in the function do_setlink in rtnetlink.c) using the nla_policy ifla_port_policy. The policy defines IFLA_PORT_PROFILE as NLA_STRING, IFLA_PORT_INSTANCE_UUID as NLA_BINARY and IFLA_PORT_HOST_UUID as NLA_STRING. That means that the length validation using the policy is for the max size of the attributes and not on exact size so the length of these attributes might be less than the sizes that enic_set_vf_port expects. This might cause an out of bands read access in the memcpys of the data of these attributes in enic_set_vf_port.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于enic模块没有验证enic_set_vf_port中nl属性的长度。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux f8bd909183acffad68780b10c1cdf36161cfd5d1 ~ 2b649d7e0cb42a660f0260ef25fd55fdc9c6c600 -
Linux Linux 2.6.35 -

II. Public POCs for CVE-2024-38659

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-38659

请登录查看更多情报信息。

Mailing List Discussions for CVE-2024-38659 (1)

Other References for CVE-2024-38659 (8)

Same Patch Batch · Linux · 2024-06-21 · 40 CVEs total

CVE-2024-36288 9.8 CRITICAL SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
CVE-2024-38381 8.8 HIGH nfc: nci: Fix uninit-value in nci_rx_work
CVE-2024-38628 7.8 HIGH usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
CVE-2024-38626 7.8 HIGH fuse: clear FR_SENT when re-adding requests into pending list
CVE-2024-38623 7.8 HIGH fs/ntfs3: Use variable length array instead of fixed size
CVE-2024-38635 7.8 HIGH soundwire: cadence: fix invalid PDI offset
CVE-2024-38388 7.8 HIGH ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
CVE-2024-36286 7.8 HIGH netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
CVE-2024-36477 7.8 HIGH tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
CVE-2024-33619 7.8 HIGH efi: libstub: only free priv.runtime_map when allocated
CVE-2024-38780 dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
CVE-2024-38662 bpf: Allow delete from sockmap/sockhash only if update is allowed
CVE-2024-38637 greybus: lights: check return of get_channel_from_mode
CVE-2024-39277 dma-mapping: benchmark: handle NUMA_NO_NODE correctly
CVE-2024-38636 f2fs: multidev: fix to recognize valid zero block address
CVE-2024-34777 dma-mapping: benchmark: fix node id validation
CVE-2024-38634 serial: max3100: Lock port->lock when calling uart_handle_cts_change()
CVE-2024-38633 serial: max3100: Update uart_driver_registered on driver removal
CVE-2024-38632 vfio/pci: fix potential memory leak in vfio_intx_enable()
CVE-2024-31076 genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

Showing top 20 of 40 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-38659

No comments yet

Leave a comment