7.1

CVE-2024-26664

hwmon: (coretemp) Fix out-of-bounds memory access

In the Linux kernel, the following vulnerability has been resolved:

hwmon: (coretemp) Fix out-of-bounds memory access

Fix a bug that pdata->cpu_map[] is set before out-of-bounds check.
The problem might be triggered on systems with more than 128 cores per
package.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.19.264 < 4.19.307
Linux ≫ Linux Kernel Version >= 5.4.221 < 5.4.269
Linux ≫ Linux Kernel Version >= 5.10.152 < 5.10.210
Linux ≫ Linux Kernel Version >= 6.1 < 6.1.78
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.17
Linux ≫ Linux Kernel Version >= 6.7 < 6.7.5
Linux ≫ Linux Kernel Version6.8 Updaterc1
Linux ≫ Linux Kernel Version6.8 Updaterc2
Linux ≫ Linux Kernel Version6.8 Updaterc3
Debian ≫ Debian Linux Version10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.158
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Mailing List
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
Mailing List
https://git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b
Patch
https://git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1
Patch
https://git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3
Patch
https://git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d
Patch
https://git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a
Patch
https://git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb
Patch
https://git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e
Patch
https://git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd
Patch