NetSight
IP …
medium5.5

CVE-2024-58016

In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size …

Impact

In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc. Check the size specified for write buffers before allocating. [PM: subject tweak]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.1 before 5.10.235
from 5.11 before 5.15.179
from 5.16 before 6.1.129
from 6.2 before 6.6.78
from 6.7 before 6.12.14
from 6.13 before 6.13.3

References