| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025012119-CVE-2024-57938-eaa0@gregkh> Date: Tue, 21 Jan 2025 13:09:21 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() Description =========== In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer overflow in sctp_association_init() While by default max_autoclose equals to INT_MAX / HZ, one may set net.sctp.max_autoclose to UINT_MAX. There is code in sctp_association_init() that can consequently trigger overflow. The Linux kernel CVE team has assigned CVE-2024-57938 to this issue. Affected and fixed versions =========================== Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 5.4.289 with commit 94b7ed0a4896420988e1776942f0a3f67167873e Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 5.10.233 with commit 081bdb3a31674339313c6d702af922bc29de2c53 Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 5.15.176 with commit f9c3adb083d3278f065a83c3f667f1246c74c31f Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 6.1.124 with commit 7af63ef5fe4d480064eb22583b24ffc8b408183a Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 6.6.70 with commit 271f031f4c31c07e2a85a1ba2b4c8e734909a477 Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 6.12.9 with commit 2297890b778b0e7c8200d6818154f7e461d78e94 Issue introduced in 3.13 with commit 9f70f46bd4c7267d48ef461a1d613ec9ec0d520c and fixed in 6.13 with commit 4e86729d1ff329815a6e8a920cb554a1d4cb5b8d Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-57938 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/sctp/associola.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/94b7ed0a4896420988e1776942f0a3f67167873e https://git.kernel.org/stable/c/081bdb3a31674339313c6d702af922bc29de2c53 https://git.kernel.org/stable/c/f9c3adb083d3278f065a83c3f667f1246c74c31f https://git.kernel.org/stable/c/7af63ef5fe4d480064eb22583b24ffc8b408183a https://git.kernel.org/stable/c/271f031f4c31c07e2a85a1ba2b4c8e734909a477 https://git.kernel.org/stable/c/2297890b778b0e7c8200d6818154f7e461d78e94 https://git.kernel.org/stable/c/4e86729d1ff329815a6e8a920cb554a1d4cb5b8d
Powered by blists - more mailing lists