CVE-2024-44966

CVE-2024-44966

High · published September 4, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

binfmt_flat: Fix corruption when not offsetting data start

Commit 04d82a6d0881 ("binfmt_flat: allow not offsetting data start")

introduced a RISC-V specific variant of the FLAT format which does

not allocate any space for the (obsolete) array of shared library

pointers. However, it did not disable the code which initializes the

array, resulting in the corruption of sizeof(long) bytes before the DATA

segment, generally the end of the TEXT segment.

Introduce MAX_SHARED_LIBS_UPDATE which depends on the state of

CONFIG_BINFMT_FLAT_NO_DATA_START_OFFSET to guard the initialization of

the shared library pointer region so that it will only be initialized

if space is reserved for it.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00221 · 11.9th percentile
Published
2024-09-04T23:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 5.13, < 5.15.1655.15.165
linux/linux_kernel≥ 5.16, < 6.1.1066.1.106
linux/linux_kernel≥ 6.2, < 6.6.476.6.47
linux/linux_kernel≥ 6.7, < 6.10.66.10.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 04 SEP 18:38Z
    binfmt_flat: Fix corruption when not offsetting data start
    cvelistv5