CVE-2024-42242
published 2024-08-07CVE-2024-42242: In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensured: if…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
8.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
blk_queue_max_segment_size() ensured:
if (max_size max_segment_size < PAGE_SIZE))
return -EINVAL;
The change from one to the other, exposed sdhci which was setting maximum
segment size too low in some circumstances.
Fix the maximum segment size when it is too low.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.9.10-1 (forky) | linux 6.9.10-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= 616f8766179277324393f7b77e07f14cb3503825 < bf78b1accef46efd9b624967cb74ae8d3c215a2b | bf78b1accef46efd9b624967cb74ae8d3c215a2b |
| linux | linux | >= 616f8766179277324393f7b77e07f14cb3503825 < 63d20a94f24fc1cbaf44d0e7c0e0a8077fde0aef | 63d20a94f24fc1cbaf44d0e7c0e0a8077fde0aef |
| linux | linux_kernel | >= 0 < 6.9.10-1 | 6.9.10-1 |
| linux | linux_kernel | >= 0 < 6.9.10-1 | 6.9.10-1 |
| linux | linux_kernel | >= 6.9 < 6.9.10 | 6.9.10 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g92r-8x2f-9v8m: In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
blk_queue_max_segment_size() en
ghsa_unreviewed·2024-08-07
CVE-2024-42242 [MEDIUM] CWE-770 GHSA-g92r-8x2f-9v8m: In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
blk_queue_max_segment_size() en
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
blk_queue_max_segment_size() ensured:
if (max_size max_segment_size < PAGE_SIZE))
return -EINVAL;
The change from one to the other, exposed sdhci which was setting maximum
segment size too low in some circumstances.
Fix the maximum segment size when it is too low.
OSV
CVE-2024-42242: In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensu
osv·2024-08-07·CVSS 5.5
CVE-2024-42242 [MEDIUM] CVE-2024-42242: In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensu
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensured: if (max_size max_segment_size < PAGE_SIZE)) return -EINVAL; The change from one to the other, exposed sdhci which was setting maximum segment size too low in some circumstances. Fix the maximum segment size when it is too low.
Red Hat
kernel: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
vendor_redhat·2024-08-07·CVSS 5.5
CVE-2024-42242 [MEDIUM] CWE-99 kernel: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
kernel: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
blk_queue_max_segment_size() ensured:
if (max_size max_segment_size < PAGE_SIZE))
return -EINVAL;
The change from one to the other, exposed sdhci which was setting maximum
segment size too low in some circumstances.
Fix the maximum segment size when it is too low.
A flaw was found in the `mmc: sdhci` driver in the Linux kernel, caused by setting the maximum segment size below the required page size (`PAGE_SIZE`). This discrepancy leads to validation errors and potential issues in handling I/O operations. The fix involved updating the `sdhci` driver to ensure that the maximum segment size is always at least the `PAGE_
Debian
CVE-2024-42242: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci:...
vendor_debian·2024·CVSS 5.5
CVE-2024-42242 [MEDIUM] CVE-2024-42242: linux - In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci:...
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE blk_queue_max_segment_size() ensured: if (max_size max_segment_size < PAGE_SIZE)) return -EINVAL; The change from one to the other, exposed sdhci which was setting maximum segment size too low in some circumstances. Fix the maximum segment size when it is too low.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.9.10-1)
sid: resolved (fixed in 6.9.10-1)
trixie: resolved (fixed in 6.9.10-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-08-07
Published