PT-2024-27206 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-04-08
·
Updated
2026-05-26
·
CVE-2024-36915
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.8.0
Description
The vulnerability is related to unsafe copies in the
nfc llcp setsockopt() function. Syzbot reported unsafe calls to copy from sockptr(). The issue can be resolved by using copy safe from sockptr() instead. The vulnerability is caused by a slab-out-of-bounds error in copy from sockptr offset and copy from sockptr functions. The error occurs when reading a size of 4 at address ffff88801caa1ec3 by task syz-executor459/5078. The call trace indicates that the issue is related to the nfc llcp setsockopt+0x6c2/0x850 function in net/nfc/llcp sock.c.Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the
nfc llcp setsockopt() function. As a temporary workaround, consider disabling the nfc llcp setsockopt() function until a patch is available.Exploit
Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu