CVE-2024-53228: riscv: kvm: Fix out-of-bounds array access
In the Linux kernel, the following vulnerability has been resolved:
riscv: kvm: Fix out-of-bounds array access
In kvmriscvvcpusbiinit() the entry->extidx can contain an out-of-bound index. This is used as a special marker for the base extensions, that cannot be disabled. However, when traversing the extensions, that special marker is not checked prior indexing the array.
Add an out-of-bounds check to the function.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53228?
CVE-2024-53228 is classified as a high severity vulnerability due to the potential for out-of-bounds array access in the Linux kernel.
How do I fix CVE-2024-53228?
To fix CVE-2024-53228, update the Linux kernel to the latest version that resolves the vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-53228?
CVE-2024-53228 affects Linux kernel versions between 6.7 and 6.11.11, as well as all versions from 6.12.0 to 6.12.2.
What components of the Linux kernel does CVE-2024-53228 impact?
CVE-2024-53228 impacts the KVM (Kernel-based Virtual Machine) component of the Linux kernel specifically on RISC-V architecture.
Is CVE-2024-53228 exploitative in nature?
Yes, CVE-2024-53228 may be exploitative as it allows for out-of-bounds access, which can lead to potential code execution or system crashes.