CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port
In the Linux kernel, the following vulnerability has been resolved:
enic: Validate length of nl attributes in enicsetvfport
enicsetvfport assumes that the nl attribute IFLAPORTPROFILE is of length PORTPROFILEMAX and that the nl attributes IFLAPORTINSTANCEUUID, IFLAPORTHOSTUUID are of length PORTUUIDMAX. These attributes are validated (in the function dosetlink in rtnetlink.c) using the nlapolicy iflaportpolicy. The policy defines IFLAPORTPROFILE as NLASTRING, IFLAPORTINSTANCEUUID as NLABINARY and IFLAPORTHOSTUUID as NLASTRING. That means that the length validation using the policy is for the max size of the attributes and not on exact size so the length of these attributes might be less than the sizes that enicsetvfport expects. This might cause an out of bands read access in the memcpys of the data of these attributes in enicsetvfport.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38659?
CVE-2024-38659 is classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-38659?
To fix CVE-2024-38659, upgrade your Linux kernel to the latest versions: 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.16-1.
Which Linux kernel versions are affected by CVE-2024-38659?
CVE-2024-38659 affects multiple versions of the Linux kernel including versions prior to the patched releases mentioned.
What components are impacted by CVE-2024-38659?
CVE-2024-38659 impacts the enic driver within the Linux kernel, particularly related to validating nl attributes in the enic_set_vf_port function.
Is CVE-2024-38659 exploitable?
Yes, CVE-2024-38659 can potentially be exploited if the affected kernel version is running in an environment where the enic driver is utilized.