CVE-2024-41026
published 2024-07-29CVE-2024-41026: In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No check is…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
No check is done on the size of the data to be transmiited. This causes
a kernel panic when this size exceeds the sg_miter's length.
Limit the number of transmitted bytes to sgm->length.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.9.10-1 (forky) | linux 6.9.10-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= ed01d210fd910f7fa7933638df14ffb8d4aac2a9 < c561c4ecce712f94b442db5960e281f13b28df2e | c561c4ecce712f94b442db5960e281f13b28df2e |
| linux | linux | >= ed01d210fd910f7fa7933638df14ffb8d4aac2a9 < 16198eef11c1929374381d7f6271b4bf6aa44615 | 16198eef11c1929374381d7f6271b4bf6aa44615 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.9.10-1 | 6.9.10-1 |
| linux | linux_kernel | >= 0 < 6.9.10-1 | 6.9.10-1 |
| linux | linux_kernel | >= 6.9 < 6.9.10 | 6.9.10 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
vendor_redhat·2024-07-29·CVSS 5.5
CVE-2024-41026 [MEDIUM] CWE-119 kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
kernel: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
In the Linux kernel, the following vulnerability has been resolved:
mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
No check is done on the size of the data to be transmiited. This causes
a kernel panic when this size exceeds the sg_miter's length.
Limit the number of transmitted bytes to sgm->length.
A flaw was found in the `davinci_mmc` driver in the Linux kernel, which lacks validation for the size of transmitted data, leading to potential kernel panics if the data size exceeded the scatter-gather list (`sg_miter`) length. This issue was addressed by adding a check to limit the transmitted data to the `sgm->length`, preventing buffer overflows and enhancing system stability.
Debian
CVE-2024-41026: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: davinc...
vendor_debian·2024·CVSS 5.5
CVE-2024-41026 [MEDIUM] CVE-2024-41026: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: davinc...
In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No check is done on the size of the data to be transmiited. This causes a kernel panic when this size exceeds the sg_miter's length. Limit the number of transmitted bytes to sgm->length.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.9.10-1)
sid: resolved (fixed in 6.9.10-1)
trixie: resolved (fixed in 6.9.10-1)
OSV
CVE-2024-41026: In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No che
osv·2024-07-29·CVSS 5.5
CVE-2024-41026 [MEDIUM] CVE-2024-41026: In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No che
In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No check is done on the size of the data to be transmiited. This causes a kernel panic when this size exceeds the sg_miter's length. Limit the number of transmitted bytes to sgm->length.
GHSA
GHSA-vm6p-m28p-wq32: In the Linux kernel, the following vulnerability has been resolved:
mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
No c
ghsa_unreviewed·2024-07-29
CVE-2024-41026 [MEDIUM] GHSA-vm6p-m28p-wq32: In the Linux kernel, the following vulnerability has been resolved:
mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
No c
In the Linux kernel, the following vulnerability has been resolved:
mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
No check is done on the size of the data to be transmiited. This causes
a kernel panic when this size exceeds the sg_miter's length.
Limit the number of transmitted bytes to sgm->length.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-29
Published