PT-2024-29801 · Linux+1 · Linux Kernel+1

Published 2024-07-10 · Updated 2024-08-09 · CVE-2024-42242

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from a change in how the maximum segment size is handled, specifically in the sdhci component. The function blk queue max segment size() ensures that the maximum size is at least equal to PAGE SIZE, whereas blk validate limits() returns an error if the maximum segment size is less than PAGE SIZE. This change exposed a problem where sdhci was setting the maximum segment size too low in certain circumstances. The fix involves correcting the maximum segment size when it is set too low.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

CWE-99

Related Identifiers

BDU:2025-02973

CVE-2024-42242

Affected Products

Astra Linux

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42242.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-42242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42242 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-42242 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02973 · Security Note
• https://git.kernel.org/stable/c/bf78b1accef46efd9b624967cb74ae8d3c215a2b · Patch
• https://cve.org/CVERecord?id=CVE-2024-42242 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-42242 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-42242 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-42242 · Vendor Advisory
• https://git.kernel.org/stable/c/63d20a94f24fc1cbaf44d0e7c0e0a8077fde0aef · Patch
• https://ubuntu.com/security/CVE-2024-42242 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.9.10 · Note
• https://docs.bell-sw.com/security/cves/CVE-2024-42242 · Note
• https://t.me/cvedetector/2706 · Telegram Post