PT-2024-9051 · Linux+9 · Linux Kernel+9

Published 2024-04-02 · Updated 2025-09-29 · CVE-2024-38579

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a buffer overflow vulnerability in the crypto component of the Linux kernel. Specifically, in the spu2 dump omd() function, the value of ptr is increased by ciph key len instead of hash iv len, which could lead to going beyond the buffer boundaries. This could allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2024:5928

ALSA-2024:7000

ALSA-2025_16880

BDU:2024-10733

CESA-2024_7000

CVE-2024-38579

DLA-3840-1

DSA-5730-1

INFSA-2024_5928

INFSA-2024_7000

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-1835

OESA-2024-1836

OESA-2024-1838

OESA-2024-1839

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

RHSA-2024:5928

RHSA-2024:7000

RHSA-2024_5928

RHSA-2024_7000

SUSE-SU-2024:2360-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2381-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2561-1

SUSE-SU-2024:2571-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6949-1

USN-6949-2

USN-6951-1

USN-6951-2

USN-6951-3

USN-6951-4

USN-6952-1

USN-6952-2

USN-6953-1

USN-6955-1

USN-6979-1

USN-7007-1

USN-7007-2

USN-7007-3

USN-7009-1

USN-7009-2

USN-7019-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 3745

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38579.json · Exploit
• https://ubuntu.com/security/CVE-2024-41097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52699 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0266.html · Security Note
• https://ubuntu.com/security/CVE-2024-42102 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39466 · Security Note
• https://ubuntu.com/security/CVE-2024-40929 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26994 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2939-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38662 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39362 · Security Note