CVE-2024-41000— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 block/ioctl 组件在处理溢出检查时存在问题。
可能的 ATT&CK 技术 1 AI
T1203 · Exploitation for Client Execution影响版本矩阵 20
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 8f6dfa1f1efe6dcca2d43e575491d8fcbe922f62< 58706e482bf45c4db48b0c53aba2468c97adda24 |
affected |
5010c27120962c85d2f421d2cf211791c9603503< 3220c90f4dbdc6d20d0608b164d964434a810d66 |
affected | ||
ef31cc87794731ffcb578a195a2c47d744e25fb8< 61ec76ec930709b7bcd69029ef1fe90491f20cf9 |
affected | ||
cb16cc1abda18a9514106d2ac8c8d7abc0be5ed8< fd841ee01fb4a79cb7f5cc424b5c96c3a73b2d1e |
affected | ||
6f64f866aa1ae6975c95d805ed51d7e9433a0016< 54160fb1db2de367485f21e30196c42f7ee0be4e |
affected | ||
6f64f866aa1ae6975c95d805ed51d7e9433a0016< ccb326b5f9e623eb7f130fbbf2505ec0e2dcaff9 |
affected | ||
bcdc288e7bc008daf38ef0401b53e4a8bb61bbe5 |
affected | ||
5.10.215< 5.10.221 |
affected | ||
| … +12 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2024-41000 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
block/ioctl: prefer different overflow check
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
block/ioctl: prefer different overflow check
Running syzkaller with the newly reintroduced signed integer overflow
sanitizer shows this report:
[ 62.982337] ------------[ cut here ]------------
[ 62.985692] cgroup: Invalid name
[ 62.986211] UBSAN: signed-integer-overflow in ../block/ioctl.c:36:46
[ 62.989370] 9pnet_fd: p9_fd_create_tcp (7343): problem connecting socket to 127.0.0.1
[ 62.992992] 9223372036854775807 + 4095 cannot be represented in type 'long long'
[ 62.997827] 9pnet_fd: p9_fd_create_tcp (7345): problem connecting socket to 127.0.0.1
[ 62.999369] random: crng reseeded on system resumption
[ 63.000634] GUP no longer grows the stack in syz-executor.2 (7353): 20002000-20003000 (20001000)
[ 63.000668] CPU: 0 PID: 7353 Comm: syz-executor.2 Not tainted 6.8.0-rc2-00035-gb3ef86b5a957 #1
[ 63.000677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 63.000682] Call Trace:
[ 63.000686] <TASK>
[ 63.000731] dump_stack_lvl+0x93/0xd0
[ 63.000919] __get_user_pages+0x903/0xd30
[ 63.001030] __gup_longterm_locked+0x153e/0x1ba0
[ 63.001041] ? _raw_read_unlock_irqrestore+0x17/0x50
[ 63.001072] ? try_get_folio+0x29c/0x2d0
[ 63.001083] internal_get_user_pages_fast+0x1119/0x1530
[ 63.001109] iov_iter_extract_pages+0x23b/0x580
[ 63.001206] bio_iov_iter_get_pages+0x4de/0x1220
[ 63.001235] iomap_dio_bio_iter+0x9b6/0x1410
[ 63.001297] __iomap_dio_rw+0xab4/0x1810
[ 63.001316] iomap_dio_rw+0x45/0xa0
[ 63.001328] ext4_file_write_iter+0xdde/0x1390
[ 63.001372] vfs_write+0x599/0xbd0
[ 63.001394] ksys_write+0xc8/0x190
[ 63.001403] do_syscall_64+0xd4/0x1b0
[ 63.001421] ? arch_exit_to_user_mode_prepare+0x3a/0x60
[ 63.001479] entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 63.001535] RIP: 0033:0x7f7fd3ebf539
[ 63.001551] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 63.001562] RSP: 002b:00007f7fd32570c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 63.001584] RAX: ffffffffffffffda RBX: 00007f7fd3ff3f80 RCX: 00007f7fd3ebf539
[ 63.001590] RDX: 4db6d1e4f7e43360 RSI: 0000000020000000 RDI: 0000000000000004
[ 63.001595] RBP: 00007f7fd3f1e496 R08: 0000000000000000 R09: 0000000000000000
[ 63.001599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 63.001604] R13: 0000000000000006 R14: 00007f7fd3ff3f80 R15: 00007ffd415ad2b8
...
[ 63.018142] ---[ end trace ]---
Historically, the signed integer overflow sanitizer did not work in the
kernel due to its interaction with `-fwrapv` but this has since been
changed [1] in the newest version of Clang; It was re-enabled in the
kernel with Commit 557f8c582a9ba8ab ("ubsan: Reintroduce signed overflow
sanitizer").
Let's rework this overflow checking logic to not actually perform an
overflow during the check itself, thus avoiding the UBSAN splat.
[1]: https://github.com/llvm/llvm-project/pull/82432
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 block/ioctl 组件在处理溢出检查时存在问题。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2024-41000 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2024-41000 的情报信息
请登录查看更多情报信息。
CVE-2024-41000 其他参考 (6)
同批安全公告 · Linux · 2024-07-12 · 共 122 条
| CVE-2024-40907 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-40923 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-40983 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-40999 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-40937 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2024-40910 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40911 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40941 | 8.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40953 | 7.9 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-39495 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40943 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40958 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40956 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40991 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40990 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40989 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40986 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40918 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40947 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2024-40979 | 7.8 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 122 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-41000
暂无评论