PT-2024-6601 · Linux+8 · Linux Kernel+8

Published 2024-05-08 · Updated 2026-01-12 · CVE-2024-42159

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the mpi3mr function in the Linux kernel, specifically with the sanitization of the num phys value stored in mr sas port->phy mask. Values larger than the size of this field should not be allowed. This could potentially impact the confidentiality, integrity, and availability of protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2024-11524

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-47400

BDU:2024-07748

CESA-2024_4211

CVE-2024-42159

DLA-4008-1

INFSA-2024_9315

MGASA-2024-0277

MGASA-2024-0278

OESA-2024-2590

OPENSUSE-SU-2025_0911-1

OPENSUSE-SU-2025_0922-1

OPENSUSE-SU-2025_0952-1

RHSA-2024:4211

RHSA-2024:9315

RHSA-2024_4211

RHSA-2024_9315

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:0886-1

SUSE-SU-2025:0911-1

SUSE-SU-2025:0922-1

SUSE-SU-2025:0952-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-7020-1

USN-7020-2

USN-7020-3

USN-7020-4

USN-7029-1

USN-7156-1

Affected Products

Alt Linux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 1818

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42159.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46737 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42104 · Vendor Advisory