CVE-2024-23307CWE-190

CVE-2024-23307

Medium · published January 25, 2024

CVSS v3.1
4.4
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) allows Forced Integer Overflow.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00585 · 47.3th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-01-25T12:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 4.1, < 6.1.846.1.84
linux/linux_kernel≥ 6.2, < 6.6.246.6.24
linux/linux_kernel≥ 6.7, < 6.7.126.7.12
linux/linux_kernel≥ 6.8, < 6.8.36.8.3
References (3)
https://bugzilla.openanolis.cn/show_bug.cgi?id=7975 · [email protected]https://bugzilla.openanolis.cn/show_bug.cgi?id=7975 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 25 JAN 06:59Z
    Integer overflow in raid5_cache_count in Linux kernel
    cvelistv5