PT-2024-21625 · Linux+8 · Linux Kernel+8

Alex Deucher + 1 · Published 2024-02-07 · Updated 2026-03-13 · CVE-2024-27042

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when the array adev->vcn.vcn config is accessed before checking if the index adev->vcn.num vcn inst is within the bounds of the array. The fix involves moving the bounds check before the array access. This ensures that adev->vcn.num vcn inst is within the bounds of the array before it is used as an index.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-07487

CESA-2024_7000

CESA-2024_7001

CVE-2024-27042

ECHO-578D-F547-7A5E

INFSA-2024_7000

INFSA-2024_7001

INFSA-2024_9315

OPENSUSE-SU-2024_1644-1

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024:9315

RHSA-2024_7000

RHSA-2024_7001

RHSA-2024_9315

RHSA-2025:8796

RLSA-2024:7001

SUSE-SU-2024:1644-1

SUSE-SU-2024:2008-1

SUSE-SU-2024:2190-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Almalinux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 3358

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27042.json · Exploit
• https://ubuntu.com/security/CVE-2024-27391 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27077 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26848 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6817-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6270 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26883 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26975 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-27042 · Security Note
• https://ubuntu.com/security/CVE-2024-35809 · Vendor Advisory