PT-2024-6752 · Linux+6 · Linux Kernel+6
Justin Stitt
·
Published
2024-05-07
·
Updated
2025-09-29
·
CVE-2024-41000
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.8.0-rc2-00035-gb3ef86b5a957
Description:
The vulnerability is related to a signed integer overflow in the block/ioctl.c file of the Linux kernel. This issue was identified using the syzkaller tool with the newly reintroduced signed integer overflow sanitizer. The overflow occurs when the value 9223372036854775807 is added to 4095, resulting in a value that cannot be represented in the 'long long' type. This vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu