PT-2024-27498 · Linux+8 · Linux Kernel+8
Syzkaller
+2
·
Published
2024-05-17
·
Updated
2025-09-29
·
CVE-2024-37356
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
A vulnerability in the Linux kernel has been resolved, specifically a shift-out-of-bounds issue in the
dctcp update alpha() function. The vulnerability occurs when the dctcp shift g module parameter is set to a value that is too large, causing a shift exponent that is too large for a 32-bit type. This issue was triggered by the syzkaller tool, which started fuzzing module parameters. The vulnerability can be exploited by setting the dctcp shift g parameter to a value of 100, which is too large for the 32-bit type. To fix this issue, the maximum value of dctcp shift g has been limited using the param set uint minmax() function.Recommendations
To resolve this issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider limiting the maximum value of the
dctcp shift g module parameter to prevent shift-out-of-bounds issues.Exploit
Fix
DoS
Out of bounds Read
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Ubuntu