Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Enrico Bravi

Researcher fromHuawei
#32819of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2024-35570
7.8
2024-08-07
Linux · Linux Kernel · CVE-2024-53106
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.65 **Description** The issue is related to a buffer overrun in the `ima eventdigest init common` function. The `ima eventdigest init` function calls `ima eventdigest init common` with `HASH ALGO LAST`, which is then used to access the `hash digest size` array, leading to a buffer overrun. A conditional statement is needed to handle this. **Recommendations** For Linux kernel versions prior to 6.6.65, update to version 6.6.65 or later to resolve the issue. As a temporary workaround, consider adding a conditional statement to handle the buffer overrun in the `ima eventdigest init common` function until a patch is available.