PT-2024-3794 · Linux+10 · Linux Kernel+10

Emmanuel Grumbach · Publicado 2024-01-18 · Atualizado 2025-09-29 · CVE-2024-26610

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Kernel do Linux (versões afetadas não especificadas)

Descrição

O problema está relacionado a uma corrupção de memória no módulo Wi-Fi do kernel do Linux, especificamente no driver iwlwifi. O problema ocorre ao copiar dados para iwl fw ini trigger tlv::data com um deslocamento em bytes, o que pode causar gravação além do buffer. Isso pode permitir que um invasor comprometa a confidencialidade, integridade e disponibilidade de informações protegidas.

Recomendações

No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2024:3618

ALSA-2024:3627

ALSA-2025_16880

ALT-PU-2024-3457

BDU:2024-04147

CESA-2024_3618

CESA-2024_3627

CVE-2024-26610

DLA-3842-1

DSA-5681-1

INFSA-2024_3618

INFSA-2024_3627

OESA-2024-1647

OESA-2024-1648

OESA-2024-1649

OESA-2024-1650

OPENSUSE-SU-2024_1641-1

OPENSUSE-SU-2024_1642-1

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

OPENSUSE-SU-2024_3623-1

OPENSUSE-SU-2024_3631-1

OPENSUSE-SU-2024_3639-1

OPENSUSE-SU-2024_3651-1

OPENSUSE-SU-2024_3652-1

OPENSUSE-SU-2024_3679-1

OPENSUSE-SU-2024_3694-1

OPENSUSE-SU-2024_3695-1

OPENSUSE-SU-2024_3696-1

OPENSUSE-SU-2024_3697-1

OPENSUSE-SU-2024_3793-1

OPENSUSE-SU-2024_3798-1

OPENSUSE-SU-2024_3814-1

OPENSUSE-SU-2024_3815-1

OPENSUSE-SU-2024_3829-1

OPENSUSE-SU-2024_3830-1

OPENSUSE-SU-2024_3837-1

OPENSUSE-SU-2024_3842-1

OPENSUSE-SU-2024_3851-1

OPENSUSE-SU-2024_3852-1

OPENSUSE-SU-2024_3855-1

OPENSUSE-SU-2024_4122-1

OPENSUSE-SU-2024_4123-1

OPENSUSE-SU-2024_4124-1

OPENSUSE-SU-2024_4214-1

OPENSUSE-SU-2024_4216-1

OPENSUSE-SU-2024_4218-1

OPENSUSE-SU-2024_4234-1

OPENSUSE-SU-2024_4235-1

OPENSUSE-SU-2024_4256-1

OPENSUSE-SU-2024_4264-1

OPENSUSE-SU-2024_4266-1

OPENSUSE-SU-2025_0101-1

OPENSUSE-SU-2025_0106-1

OPENSUSE-SU-2025_0107-1

OPENSUSE-SU-2025_0109-1

OPENSUSE-SU-2025_0114-1

OPENSUSE-SU-2025_0115-1

OPENSUSE-SU-2025_0150-1

OPENSUSE-SU-2025_0158-1

OPENSUSE-SU-2025_0240-1

OPENSUSE-SU-2025_0244-1

OPENSUSE-SU-2025_0248-1

OPENSUSE-SU-2025_0251-1

OPENSUSE-SU-2025_0252-1

OPENSUSE-SU-2025_0253-1

OPENSUSE-SU-2025_0261-1

OPENSUSE-SU-2025_0266-1

RHSA-2024:3618

RHSA-2024:3627

RHSA-2024_3618

RHSA-2024_3627

RLSA-2024:3618

RLSA-2024:3627

SUSE-SU-2024:1641-1

SUSE-SU-2024:1642-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1645-1

SUSE-SU-2024:1647-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:1677-1

SUSE-SU-2024:1679-1

SUSE-SU-2024:1680-1

SUSE-SU-2024:1682-1

SUSE-SU-2024:1683-1

SUSE-SU-2024:1685-1

SUSE-SU-2024:1695-1

SUSE-SU-2024:1696-1

SUSE-SU-2024:1705-1

SUSE-SU-2024:1706-1

SUSE-SU-2024:1707-1

SUSE-SU-2024:1708-1

SUSE-SU-2024:1711-1

SUSE-SU-2024:1720-1

SUSE-SU-2024:1723-1

SUSE-SU-2024:1726-1

SUSE-SU-2024:1731-1

SUSE-SU-2024:1732-1

SUSE-SU-2024:1736-1

SUSE-SU-2024:1738-1

SUSE-SU-2024:1739-1

SUSE-SU-2024:1740-1

SUSE-SU-2024:1746-1

SUSE-SU-2024:1748-1

SUSE-SU-2024:1749-1

SUSE-SU-2024:1750-1

SUSE-SU-2024:1751-1

SUSE-SU-2024:1753-1

SUSE-SU-2024:1757-1

SUSE-SU-2024:1759-1

SUSE-SU-2024:1760-1

SUSE-SU-2024:2092-1

SUSE-SU-2024:2100-1

SUSE-SU-2024:2101-1

SUSE-SU-2024:2139-1

SUSE-SU-2024:2148-1

SUSE-SU-2024:2162-1

SUSE-SU-2024:2163-1

SUSE-SU-2024:2191-1

SUSE-SU-2024:2207-1

SUSE-SU-2024:2208-1

SUSE-SU-2024:2209-1

SUSE-SU-2024:2335-1

SUSE-SU-2024:2337-1

SUSE-SU-2024:2357-1

SUSE-SU-2024:2373-1

SUSE-SU-2024:2382-1

SUSE-SU-2024:2446-1

SUSE-SU-2024:2447-1

SUSE-SU-2024:2448-1

SUSE-SU-2024:2472-1

SUSE-SU-2024:2473-1

SUSE-SU-2024:2722-1

SUSE-SU-2024:2725-1

SUSE-SU-2024:2751-1

SUSE-SU-2024:2755-1

SUSE-SU-2024:2773-1

SUSE-SU-2024:2824-1

SUSE-SU-2024:2825-1

SUSE-SU-2024:2840-1

SUSE-SU-2024:2843-1

SUSE-SU-2024:2850-1

SUSE-SU-2024:2851-1

SUSE-SU-2024:3034-1

SUSE-SU-2024:3048-1

SUSE-SU-2024:3318-1

SUSE-SU-2024:3336-1

SUSE-SU-2024:3347-1

SUSE-SU-2024:3348-1

SUSE-SU-2024:3368-1

SUSE-SU-2024:3375-1

SUSE-SU-2024:3379-1

SUSE-SU-2024:3399-1

SUSE-SU-2024:3623-1

SUSE-SU-2024:3631-1

SUSE-SU-2024:3639-1

SUSE-SU-2024:3651-1

SUSE-SU-2024:3652-1

SUSE-SU-2024:3679-1

SUSE-SU-2024:3694-1

SUSE-SU-2024:3695-1

SUSE-SU-2024:3696-1

SUSE-SU-2024:3697-1

SUSE-SU-2024:3793-1

SUSE-SU-2024:3798-1

SUSE-SU-2024:3814-1

SUSE-SU-2024:3815-1

SUSE-SU-2024:3829-1

SUSE-SU-2024:3830-1

SUSE-SU-2024:3837-1

SUSE-SU-2024:3842-1

SUSE-SU-2024:3851-1

SUSE-SU-2024:3852-1

SUSE-SU-2024:3855-1

SUSE-SU-2024:4122-1

SUSE-SU-2024:4123-1

SUSE-SU-2024:4124-1

SUSE-SU-2024:4214-1

SUSE-SU-2024:4216-1

SUSE-SU-2024:4218-1

SUSE-SU-2024:4234-1

SUSE-SU-2024:4235-1

SUSE-SU-2024:4256-1

SUSE-SU-2024:4264-1

SUSE-SU-2024:4266-1

SUSE-SU-2025:0101-1

SUSE-SU-2025:0106-1

SUSE-SU-2025:0107-1

SUSE-SU-2025:0109-1

SUSE-SU-2025:0114-1

SUSE-SU-2025:0115-1

SUSE-SU-2025:0150-1

SUSE-SU-2025:0158-1

SUSE-SU-2025:0240-1

SUSE-SU-2025:0244-1

SUSE-SU-2025:0248-1

SUSE-SU-2025:0251-1

SUSE-SU-2025:0252-1

SUSE-SU-2025:0253-1

SUSE-SU-2025:0261-1

SUSE-SU-2025:0266-1

USN-6765-1

USN-6766-1

USN-6766-2

USN-6766-3

USN-6795-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

USN-6828-1

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Referências · 1581

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26610.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:2148-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-52642 · Aviso do Fabricante
• https://bugzilla.suse.com/1222721 · Nota
• https://ubuntu.com/security/CVE-2024-26698 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-26745 · Nota
• https://ubuntu.com/security/CVE-2023-52644 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2024:3379-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2024:4266-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-52644 · Nota de Segurança
• https://bugzilla.suse.com/1222011 · Nota
• https://suse.com/security/cve/CVE-2023-52561 · Nota
• https://osv.dev/vulnerability/USN-6766-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2024-26603 · Nota
• https://suse.com/support/update/announcement/2024/suse-su-20243348-1 · Nota