PT-2024-4095 · Linux+9 · Linux Kernel+9

Roded Zats

·

Published

2024-05-03

·

Updated

2025-09-29

·

CVE-2024-36017

CVSS v2.0

6.8

Medium

AV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the do setvfinfo() function in the net/core/rtnetlink.c module of the Linux kernel, which is associated with a buffer overflow vulnerability. This vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The problem arises from the validation of attributes within a nested IFLA VF VLAN LIST, where each attribute is expected to be at least the size of struct ifla vf vlan info, which is 14 bytes. However, the current validation checks against NLA HDRLEN (4 bytes), which is less than the required size, potentially leading to out-of-bounds read access when accessing the saved entry in ivvl.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

Related Identifiers

ALSA-2024:5101
ALSA-2024:5102
ALSA-2024:5363
ALSA-2025_16880
BDU:2024-04546
CESA-2024_5101
CESA-2024_5102
CVE-2024-36017
DLA-3840-1
DLA-3843-1
DSA-5703-1
INFSA-2024_5101
INFSA-2024_5102
INFSA-2024_5363
MGASA-2024-0263
MGASA-2024-0266
OESA-2024-1705
OESA-2024-1706
OESA-2024-1707
OESA-2024-1863
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
RHSA-2024:5066
RHSA-2024:5067
RHSA-2024:5101
RHSA-2024:5102
RHSA-2024:5281
RHSA-2024:5363
RHSA-2024:6206
RHSA-2024_5101
RHSA-2024_5102
RHSA-2024_5363
RLSA-2024:5101
RLSA-2024:5102
RLSA-2024:5363
RXSA-2024:5101
SUSE-SU-2024:2360-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2381-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2561-1
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6949-1
USN-6949-2
USN-6950-1
USN-6950-2
USN-6950-3
USN-6950-4
USN-6951-1
USN-6951-2
USN-6951-3
USN-6951-4
USN-6952-1
USN-6952-2
USN-6953-1
USN-6955-1
USN-6956-1
USN-6957-1
USN-6979-1
USN-7019-1

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu