PT-2024-33858 · Linux+2 · Linux Kernel+2
Published
2024-10-21
·
Updated
2025-06-09
·
CVE-2024-50018
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue concerns an overflow in
napi defer hard irqs within the Linux kernel's net: napi component. This overflow occurred because napi defer hard irqs and napi defer irqs count were defined as signed integers, despite their values never going below zero. To address this, their types were changed to unsigned 32-bit integers (u32), and an overflow check was added to limit the value to S32 MAX in sysfs. This change prevents overflows when attempting to set high values for napi defer hard irqs. For example, attempting to set a value of 2147483649 would result in a write error due to being out of range.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse