Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-42292— kobject_uevent: Fix OOB access within zap_modalias_env()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于错误地计算了内存块的大小，允许越界访问内存。

AI Predicted 4.4 Difficulty: Moderate EPSS 0.25% · P15

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 9b3fa47d4a76b1d606a396455f9bbeee083ef008< 81a15d28f32af01493ae8c5457e0d55314a4167d affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< b59a5e86a3934f1b6a5bd1368902dbc79bdecc90 affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< 648d5490460d38436640da0812bf7f6351c150d2 affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< c5ee8adc8d98a49703320d13878ba2b923b142f5 affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< 68d63ace80b76395e7935687ecdb86421adc2168 affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< 57fe01d3d04276875c7e3a6dc763517fc05b8762 affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< d4663536754defff75ff1eca0aaebc41da165a8d affected
9b3fa47d4a76b1d606a396455f9bbeee083ef008< dd6e9894b451e7c85cceb8e9dc5432679a70e7dc affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-42292

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
kobject_uevent: Fix OOB access within zap_modalias_env()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于错误地计算了内存块的大小，允许越界访问内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 9b3fa47d4a76b1d606a396455f9bbeee083ef008 ~ 81a15d28f32af01493ae8c5457e0d55314a4167d -
Linux Linux 4.15 -

II. Public POCs for CVE-2024-42292

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-42292

请登录查看更多情报信息。

Other References for CVE-2024-42292 (6)

Same Patch Batch · Linux · 2024-08-17 · 109 CVEs total

CVE-2024-42285 9.8 CRITICAL RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE-2024-42284 9.1 CRITICAL tipc: Return non-zero value from tipc_udp_addr2str() on error
CVE-2024-43847 8.8 HIGH wifi: ath12k: fix invalid memory access while processing fragmented packets
CVE-2024-43848 8.8 HIGH wifi: mac80211: fix TTLM teardown work
CVE-2024-42287 8.8 HIGH scsi: qla2xxx: Complete command early within lock
CVE-2024-42318 8.8 HIGH landlock: Don't lose track of restrictions on cred_transfer
CVE-2024-43832 7.8 HIGH s390/uv: Don't call folio_wait_writeback() without a folio reference
CVE-2024-42288 7.8 HIGH scsi: qla2xxx: Fix for possible memory corruption
CVE-2024-43845 7.8 HIGH udf: Fix bogus checksum computation in udf_rename()
CVE-2024-42293 7.8 HIGH arm64: mm: Fix lockless walks with static and dynamic page-table folding
CVE-2024-43830 7.8 HIGH leds: trigger: Unregister sysfs attributes before calling deactivate()
CVE-2024-42296 7.8 HIGH f2fs: fix return value of f2fs_convert_inline_inode()
CVE-2024-42301 7.8 HIGH dev/parport: fix the array out-of-bounds risk
CVE-2024-42311 7.8 HIGH hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
CVE-2024-42313 7.8 HIGH media: venus: fix use after free in vdec_close
CVE-2024-42306 7.8 HIGH udf: Avoid using corrupted block bitmap buffer
CVE-2024-42304 7.8 HIGH ext4: make sure the first directory block is not a hole
CVE-2024-42314 7.8 HIGH btrfs: fix extent map use-after-free when adding pages to compressed bio
CVE-2024-42299 7.8 HIGH fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
CVE-2024-42297 7.8 HIGH f2fs: fix to don't dirty inode for readonly filesystem

Showing top 20 of 109 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-42292

No comments yet

Leave a comment