In the Linux kernel, the following vulnerability has been resolved:
binfmt_flat: Fix integer overflow bug on 32 bit systems
Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit systems the calculation of "full_data" could be wrong.
full_data = data_len + relocs * sizeof(unsigned long);
[
{
"signature_version": "v1",
"id": "CVE-2024-58010-0adc0651",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e8cd712bb06a507b26efd2a56155076aa454345",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-4dd2f51e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95506c7f33452450346fbe2975c1359100f854ca",
"digest": {
"length": 8301.0,
"function_hash": "280057549063995216777643317177401166393"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-63718cab",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b6be54d7386b7addbf9e5947366f94aad046938",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-7481830d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d17ca8f2dfcf423c439859995910a20e38b86f00",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-74d9ecc0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc8ca18b8ef4648532c001bd6c8151143b569275",
"digest": {
"length": 8607.0,
"function_hash": "48646876624753881866457238009931995704"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-74eadf19",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a009378af674b808efcca1e2e67916e79ce866b3",
"digest": {
"length": 8301.0,
"function_hash": "280057549063995216777643317177401166393"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-91538c93",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6fb98e0576ea155267e206286413dcb3a3d55c12",
"digest": {
"length": 8584.0,
"function_hash": "100840923656898570942864084805386331279"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-91734126",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e8cd712bb06a507b26efd2a56155076aa454345",
"digest": {
"length": 8301.0,
"function_hash": "280057549063995216777643317177401166393"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-95d4afbd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d17ca8f2dfcf423c439859995910a20e38b86f00",
"digest": {
"length": 8301.0,
"function_hash": "280057549063995216777643317177401166393"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-9d5446e4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b6be54d7386b7addbf9e5947366f94aad046938",
"digest": {
"length": 8605.0,
"function_hash": "244506187628427953272967052432085679247"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-aa006dd1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6fb98e0576ea155267e206286413dcb3a3d55c12",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-d51d3b7e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc8ca18b8ef4648532c001bd6c8151143b569275",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-e036df1f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a009378af674b808efcca1e2e67916e79ce866b3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-e6576175",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95506c7f33452450346fbe2975c1359100f854ca",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-ee975787",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55cf2f4b945f6a6416cc2524ba740b83cc9af25a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178634935018228613314784736721778336929",
"299975587878136166044670884485813398527",
"41776382976721530073474656562958003178",
"183780435933207315841525323489526801845"
]
},
"deprecated": false,
"target": {
"file": "fs/binfmt_flat.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-58010-ffcf4c1b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55cf2f4b945f6a6416cc2524ba740b83cc9af25a",
"digest": {
"length": 8301.0,
"function_hash": "280057549063995216777643317177401166393"
},
"deprecated": false,
"target": {
"function": "load_flat_file",
"file": "fs/binfmt_flat.c"
},
"signature_type": "Function"
}
]