NetSight
IP …
high7.1

CVE-2024-42292

In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calcula…

Impact

In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15.1 before 4.19.320
from 4.20 before 5.4.282
from 5.5 before 5.10.224
from 5.11 before 5.15.165
from 5.16 before 6.1.103
from 6.2 before 6.6.44

Weakness classification

CWE-125

References