In the Linux kernel, the following vulnerability has been resolved:
kobjectuevent: Fix OOB access within zapmodalias_env()
zapmodaliasenv() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.
[
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68d63ace80b76395e7935687ecdb86421adc2168",
"deprecated": false,
"id": "CVE-2024-42292-0ab01fdd",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57fe01d3d04276875c7e3a6dc763517fc05b8762",
"deprecated": false,
"id": "CVE-2024-42292-3113eb8d",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
},
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c5ee8adc8d98a49703320d13878ba2b923b142f5",
"deprecated": false,
"id": "CVE-2024-42292-58406b8c",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd6e9894b451e7c85cceb8e9dc5432679a70e7dc",
"deprecated": false,
"id": "CVE-2024-42292-6b0eaeb7",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
},
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57fe01d3d04276875c7e3a6dc763517fc05b8762",
"deprecated": false,
"id": "CVE-2024-42292-739ee092",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4663536754defff75ff1eca0aaebc41da165a8d",
"deprecated": false,
"id": "CVE-2024-42292-8e94af2b",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b59a5e86a3934f1b6a5bd1368902dbc79bdecc90",
"deprecated": false,
"id": "CVE-2024-42292-9f614e46",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c5ee8adc8d98a49703320d13878ba2b923b142f5",
"deprecated": false,
"id": "CVE-2024-42292-a017cae8",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
},
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b59a5e86a3934f1b6a5bd1368902dbc79bdecc90",
"deprecated": false,
"id": "CVE-2024-42292-c95c1239",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@68d63ace80b76395e7935687ecdb86421adc2168",
"deprecated": false,
"id": "CVE-2024-42292-d1e8f710",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
},
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd6e9894b451e7c85cceb8e9dc5432679a70e7dc",
"deprecated": false,
"id": "CVE-2024-42292-d83249cb",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@648d5490460d38436640da0812bf7f6351c150d2",
"deprecated": false,
"id": "CVE-2024-42292-e3ca7bcc",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
},
{
"target": {
"function": "zap_modalias_env",
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@648d5490460d38436640da0812bf7f6351c150d2",
"deprecated": false,
"id": "CVE-2024-42292-e9658db8",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "79761443352732857982970400490910790907",
"length": 596.0
}
},
{
"target": {
"file": "lib/kobject_uevent.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d4663536754defff75ff1eca0aaebc41da165a8d",
"deprecated": false,
"id": "CVE-2024-42292-ecd92d63",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13752752675615713420027048935917015376",
"241839232553137287044630701708621372763",
"93362584226230761508465568362972588494",
"209424808765514509700645533461970693473",
"304057489897362565086901619911544752111",
"22520006462895804657496700976807002484"
]
}
}
]