PT-2024-4091 · Linux+6 · Linux Kernel+6
Huai-Yuan Liu
·
Published
2024-05-04
·
Updated
2025-09-29
·
CVE-2024-36015
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the
register device function in the Linux kernel, where the return value of ida simple get is unchecked, leading to the use of an invalid index value. This can cause the kernel to access memory outside the allocated buffer, potentially affecting confidentiality, integrity, and availability of protected information. To address this issue, the index should be checked after ida simple get, and when the index value is abnormal, a warning message should be printed, the port should be dropped, and the value should be recorded.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Memory Corruption
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu