CVE-2024-26982 — Out-of-bounds Read in Linux
Severity
7.1HIGHNVD
OSV8.8OSV7.8OSV6.8OSV5.9OSV5.5
EPSS
0.0%
top 90.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 1
Latest updateJul 16
Description
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: check the inode number is not the invalid value of zero
Syskiller has produced an out of bounds access in fill_meta_index().
That out of bounds access is ultimately caused because the inode
has an inode number with the invalid value of zero, which was not checked.
The reason this causes the out of bounds access is due to following
sequence of events:
1. Fill_meta_index() is called to allocate (via empty_meta_index…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages8 packages
▶CVEListV5linux/linux6545b246a2c815a8fcd07d58240effb6ec3481b1 — 32c114a58236fe67141634774559f21f1dc96fd7+7
Patches
🔴Vulnerability Details
36📋Vendor Advisories
37💬Community
1Bugzilla
▶