CVE-2024-42292: kobject_uevent: Fix OOB access within zap_modalias_env()

Q: What is the severity of CVE-2024-42292?

CVE-2024-42292 has a medium severity rating due to its out-of-bounds access vulnerability in the Linux kernel.

Q: How do I fix CVE-2024-42292?

To fix CVE-2024-42292, upgrade your Linux kernel to version 5.10.226-1 or later, or to any of the specified versions above.

Q: Which Linux versions are affected by CVE-2024-42292?

Affected Linux kernel versions include all versions up to 5.10.223-1 and specific versions of 6.1 and 6.12.

Q: What are the consequences of not patching CVE-2024-42292?

Not patching CVE-2024-42292 may lead to potential system instability or unauthorized memory access.

Q: Who is affected by CVE-2024-42292?

Users and administrators running vulnerable versions of the Linux kernel on their systems are at risk with CVE-2024-42292.

Published Aug 17, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

kobjectuevent: Fix OOB access within zapmodaliasenv()

zapmodaliasenv() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.

Affected Software

206 affected componentsFixes available

IBM Security Verify Governance<=ISVG 10.0.2

IBM Security Verify Governance - Identity Manager virtual appliance component<=ISVG 10.0.2

Linux Linux kernel>=4.15.1<4.19.320

Linux Linux kernel>=4.20<5.4.282

Linux Linux kernel>=5.5<5.10.224

Linux Linux kernel>=5.11<5.15.165

Linux Linux kernel>=5.16<6.1.103

Linux Linux kernel>=6.2<6.6.44

Linux Linux kernel>=6.7<6.10.3

Linux Linux kernel=4.15

Linux Linux kernel=4.15-rc6

Linux Linux kernel=4.15-rc7

Linux Linux kernel=4.15-rc8

Linux Linux kernel=4.15-rc9

debian/linux<6.1.106-1

6.1.106-1

debian/linux<6.10.3-1

6.10.3-1

debian/linux<6.10.3-1

6.10.3-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-azure*

ubuntu/linux-aws-hwe*

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oracle*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1135.145~18.04.1

5.4.0-1135.145~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1140.147~18.04.1

5.4.0-1140.147~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1139.148~18.04.1

5.4.0-1139.148~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-200.220~18.04.1

5.4.0-200.220~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1082.87~18.04.1

5.4.0-1082.87~18.04.1

ubuntu/linux-kvm*

ubuntu/linux-oem*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1134.143~18.04.1

5.4.0-1134.143~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1119.131~18.04.1

5.4.0-1119.131~18.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-200.220

5.4.0-200.220

ubuntu/linux-aws<5.4.0-1135.145

5.4.0-1135.145

ubuntu/linux-aws-5.15<5.15.0-1072.78~20.04.1

5.15.0-1072.78~20.04.1

ubuntu/linux-azure<5.4.0-1140.147

5.4.0-1140.147

ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1

5.15.0-1078.87~20.04.1

ubuntu/linux-bluefield<5.4.0-1095.102

5.4.0-1095.102

ubuntu/linux-gcp<5.4.0-1139.148

5.4.0-1139.148

ubuntu/linux-gcp-5.15<5.15.0-1071.79~20.04.1

5.15.0-1071.79~20.04.1

ubuntu/linux-gkeop<5.4.0-1102.106

5.4.0-1102.106

ubuntu/linux-gkeop-5.15<5.15.0-1055.62~20.04.1

5.15.0-1055.62~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-125.135~20.04.1

5.15.0-125.135~20.04.1

ubuntu/linux-ibm<5.4.0-1082.87

5.4.0-1082.87

ubuntu/linux-ibm-5.15<5.15.0-1065.68~20.04.1

5.15.0-1065.68~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1067.73~20.04.1

5.15.0-1067.73~20.04.1

ubuntu/linux-iot<5.4.0-1044.45

5.4.0-1044.45

ubuntu/linux-kvm<5.4.0-1123.131

5.4.0-1123.131

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-125.135~20.04.1

5.15.0-125.135~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1

5.15.0-1032.32~20.04.1

ubuntu/linux-oracle<5.4.0-1134.143

5.4.0-1134.143

ubuntu/linux-oracle-5.15<5.15.0-1070.76~20.04.1

5.15.0-1070.76~20.04.1

ubuntu/linux-raspi<5.4.0-1119.131

5.4.0-1119.131

ubuntu/linux-riscv-5.15<5.15.0-1068.72~20.04.1

5.15.0-1068.72~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1054.58

5.4.0-1054.58

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1135.145+fips1

5.4.0-1135.145+fips1

ubuntu/linux-azure-fips<5.4.0-1140.147+fips1

5.4.0-1140.147+fips1

ubuntu/linux-fips<5.4.0-1109.119

5.4.0-1109.119

ubuntu/linux-gcp-fips<5.4.0-1139.148+fips1

5.4.0-1139.148+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-125.135

5.15.0-125.135

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1072.78

5.15.0-1072.78

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1020.22~22.04.1

6.8.0-1020.22~22.04.1

ubuntu/linux-azure<5.15.0-1075.84

5.15.0-1075.84

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1020.23~22.04.1

6.8.0-1020.23~22.04.1

ubuntu/linux-azure-fde<5.15.0-1076.85.1

5.15.0-1076.85.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1071.79

5.15.0-1071.79

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1019.21~22.04.1

6.8.0-1019.21~22.04.1

ubuntu/linux-gke<5.15.0-1069.75

5.15.0-1069.75

ubuntu/linux-gkeop<5.15.0-1055.62

5.15.0-1055.62

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-50.51~22.04.1

6.8.0-50.51~22.04.1

ubuntu/linux-ibm<5.15.0-1065.68

5.15.0-1065.68

ubuntu/linux-ibm-6.8<6.8.0-1017.17~22.04.1

6.8.0-1017.17~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1067.73

5.15.0-1067.73

ubuntu/linux-kvm<5.15.0-1069.74

5.15.0-1069.74

ubuntu/linux-lowlatency<5.15.0-125.135

5.15.0-125.135

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-50.51.1~22.04.1

6.8.0-50.51.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1067.68

5.15.0-1067.68

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1019.21~22.04.1

6.8.0-1019.21~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1032.32

5.15.0-1032.32

ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20

5.15.0-1020.20

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1070.76

5.15.0-1070.76

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1017.18~22.04.1

6.8.0-1017.18~22.04.1

ubuntu/linux-raspi<5.15.0-1065.68

5.15.0-1065.68

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-50.51.1~22.04.1

6.8.0-50.51.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1038.42

5.15.0-1038.42

ubuntu/linux-bluefield<5.15.0-1056.58

5.15.0-1056.58

ubuntu/linux-intel-iot-realtime<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-realtime<5.15.0-1073.81

5.15.0-1073.81

ubuntu/linux-realtime-6.8<6.8.1-1013.14~22.04.1

6.8.1-1013.14~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1072.78+fips1

5.15.0-1072.78+fips1

ubuntu/linux-azure-fips<5.15.0-1075.84+fips1

5.15.0-1075.84+fips1

ubuntu/linux-fips<5.15.0-125.135+fips1

5.15.0-125.135+fips1

ubuntu/linux-gcp-fips<5.15.0-1071.79+fips1

5.15.0-1071.79+fips1

ubuntu/linux<6.8.0-50.51

6.8.0-50.51

ubuntu/linux-aws<6.8.0-1020.22

6.8.0-1020.22

ubuntu/linux-azure<6.8.0-1020.23

6.8.0-1020.23

ubuntu/linux-gcp<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-gke<6.8.0-1015.19

6.8.0-1015.19

ubuntu/linux-gkeop<6.8.0-1002.4

6.8.0-1002.4

ubuntu/linux-ibm<6.8.0-1017.17

6.8.0-1017.17

ubuntu/linux-lowlatency<6.8.0-50.51.1

6.8.0-50.51.1

ubuntu/linux-nvidia<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-nvidia-lowlatency<6.8.0-1019.21.1

6.8.0-1019.21.1

ubuntu/linux-oem-6.8<6.8.0-1018.18

6.8.0-1018.18

ubuntu/linux-oracle<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi<6.8.0-1016.18

6.8.0-1016.18

ubuntu/linux-riscv<6.8.0-50.51.1

6.8.0-50.51.1

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2015.16

6.8.0-2015.16

ubuntu/linux-realtime<6.8.1-1013.14

6.8.1-1013.14

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.106-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.10.3-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-200.220~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.87~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1119.131~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-200.220
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1095.102
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1102.106
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.62~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1082.87
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1044.45
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1123.131
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1134.143
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1119.131
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.72~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.58
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.145+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.147+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1109.119
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.148+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.22~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.84
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.23~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.85.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.75
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.62
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.17~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.73
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.74
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1067.68
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1065.68
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1038.42
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1056.58
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.81
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1013.14~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.78+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.84+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-125.135+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.79+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.22
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.23
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1015.19
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1002.4
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.17
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21.1
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1018.18
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1016.18
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-50.51.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2015.16
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1013.14
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1

Event History

Aug 17, 2024

CVE Published

via MITRE·09:09 AM

Data Sourced

via MITRE·09:09 AM

Description

Data Sourced

via OSV·09:15 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·09:15 AM

Description

Oct 15, 2026

Data Sourced

via NVD·01:18 AM

RemedySeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-7235779

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-42292?

CVE-2024-42292 has a medium severity rating due to its out-of-bounds access vulnerability in the Linux kernel.

How do I fix CVE-2024-42292?

To fix CVE-2024-42292, upgrade your Linux kernel to version 5.10.226-1 or later, or to any of the specified versions above.

Which Linux versions are affected by CVE-2024-42292?

Affected Linux kernel versions include all versions up to 5.10.223-1 and specific versions of 6.1 and 6.12.

What are the consequences of not patching CVE-2024-42292?

Not patching CVE-2024-42292 may lead to potential system instability or unauthorized memory access.

Who is affected by CVE-2024-42292?

Users and administrators running vulnerable versions of the Linux kernel on their systems are at risk with CVE-2024-42292.

CVE-2024-42292: kobject_uevent: Fix OOB access within zap_modalias_env()

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-42292?

How do I fix CVE-2024-42292?

Which Linux versions are affected by CVE-2024-42292?

What are the consequences of not patching CVE-2024-42292?

Who is affected by CVE-2024-42292?

Company

Resources

Contact