PT-2024-32788 · Linux+7 · Linux Kernel+7
Jann Horn
·
Published
2024-09-03
·
Updated
2026-05-12
·
CVE-2024-47742
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
The issue is related to the firmware loader in the Linux kernel, where certain code paths construct firmware file names from string components passed through from devices or semi-privileged userspace. This could potentially allow for path traversal attacks. The affected code paths include
lpfc sli4 request firmware update(), nfp net fw find(), and module flash fw schedule(). The vulnerability is fixed by rejecting any firmware names containing ".." path components.Recommendations
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable code paths, such as
lpfc sli4 request firmware update(), nfp net fw find(), and module flash fw schedule(), until a patch is available. Additionally, avoid using the ETHTOOL MSG MODULE FW FLASH ACT netlink command with userspace-provided firmware names until the issue is resolved.Exploit
Fix
DoS
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu