CVE-2024-36883: net: fix out-of-bounds access in ops_init
First published: Thu May 30 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access in ops_init net_alloc_generic is called by net_alloc, which is called without any locking. It reads max_gen_ptrs, which is changed under pernet_ops_rwsem. It is read twice, first to allocate an array, then to set s.len, which is later used to limit the bounds of the array access. It is possible that the array is allocated and another thread is registering a new pernet ops, increments max_gen_ptrs, which is then used to set s.len with a larger than allocated length for the variable array. Fix it by reading max_gen_ptrs only once in net_alloc_generic. If max_gen_ptrs is later incremented, it will be caught in net_assign_generic.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <4.19.314 | 4.19.314 |
| redhat/kernel | <5.4.276 | 5.4.276 |
| redhat/kernel | <5.10.217 | 5.10.217 |
| redhat/kernel | <5.15.159 | 5.15.159 |
| redhat/kernel | <6.1.91 | 6.1.91 |
| redhat/kernel | <6.6.31 | 6.6.31 |
| redhat/kernel | <6.8.10 | 6.8.10 |
| redhat/kernel | <6.9 | 6.9 |
| IBM Security Verify Governance - Identity Manager | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Software Stack | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Virtual Appliance | <=ISVG 10.0.2 | |
| IBM Security Verify Governance Identity Manager Container | <=ISVG 10.0.2 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 6.12.22-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0c3248bc708a7797be573214065cf908ff1f54c7
- https://git.kernel.org/stable/c/2d60ff5874aefd006717ca5e22ac1e25eac29c42
- https://git.kernel.org/stable/c/3cdc34d76c4f777579e28ad373979d36c030cfd3
- https://git.kernel.org/stable/c/7b0e64583eab8c1d896b47e5dd0bf2e7d86ec41f
- https://git.kernel.org/stable/c/9518b79bfd2fbf99fa9b7e8e36bcb1825e7ba030
- https://git.kernel.org/stable/c/a26ff37e624d12e28077e5b24d2b264f62764ad6
- https://git.kernel.org/stable/c/b6dbfd5bcc267a95a0bf1bf96af46243f96ec6cd
- https://git.kernel.org/stable/c/f4f94587e1bf87cb40ec33955a9d90148dd026ab
- https://launchpad.net/bugs/cve/CVE-2024-36883
- https://access.redhat.com/security/cve/CVE-2024-36883
- https://lore.kernel.org/linux-cve-announce/2024053032-CVE-2024-36883-b892@gregkh/T
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2284272
- https://access.redhat.com/errata/RHSA-2024:5673
- https://access.redhat.com/errata/RHSA-2024:5672
- https://access.redhat.com/errata/RHSA-2024:6206
- https://access.redhat.com/errata/RHSA-2024:6567
- https://access.redhat.com/errata/RHSA-2024:7001
- https://access.redhat.com/errata/RHSA-2024:7000
- https://bugzilla.redhat.com/show_bug.cgi?id=2284271
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://security.netapp.com/advisory/ntap-20241018-0001/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36883
- https://nvd.nist.gov/vuln/detail/CVE-2024-36883
- https://security-tracker.debian.org/tracker/CVE-2024-36883
- https://ubuntu.com/security/CVE-2024-36883
- https://git.kernel.org/linus/a26ff37e624d12e28077e5b24d2b264f62764ad6
- https://www.ibm.com/support/pages/node/7230443 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2024-36883?
CVE-2024-36883 has been rated as a high severity vulnerability affecting the Linux kernel.
Which Linux kernel versions are affected by CVE-2024-36883?
CVE-2024-36883 affects Linux kernel versions earlier than 4.19.314, 5.4.276, 5.10.217, 5.15.159, 6.1.91, 6.6.31, 6.8.10, and 6.9.
How do I fix CVE-2024-36883?
To fix CVE-2024-36883, upgrade your kernel to the patched versions specified in the vulnerability report.
What problem does CVE-2024-36883 cause in the Linux kernel?
CVE-2024-36883 can lead to an out-of-bounds access issue in the network subsystem of the Linux kernel.
Is CVE-2024-36883 related to a particular component in the Linux kernel?
Yes, CVE-2024-36883 is specifically related to the network operations initialization and allocation in the Linux kernel.
- agent/title
- agent/type
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/launchpad-cve
- source/Launchpad
- agent/remedy
- agent/author
- agent/first-publish-date
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-36883
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- collector/mitre-cve
- source/MITRE
- agent/trending
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- package-manager/redhat
- package-manager/debian
- vendor/ibm
- canonical/ibm security verify governance - identity manager
- version/ibm security verify governance - identity manager/isvg 10.0.2
- canonical/ibm security verify governance, identity manager software stack
- version/ibm security verify governance, identity manager software stack/isvg 10.0.2
- canonical/ibm security verify governance, identity manager virtual appliance
- version/ibm security verify governance, identity manager virtual appliance/isvg 10.0.2
- canonical/ibm security verify governance identity manager container
- version/ibm security verify governance identity manager container/isvg 10.0.2