High · published December 2, 2024
In the Linux kernel, the following vulnerability has been resolved:
ima: fix buffer overrun in ima_eventdigest_init_common
Function ima_eventdigest_init() calls ima_eventdigest_init_common()
with HASH_ALGO__LAST which is then used to access the array
hash_digest_size[] leading to buffer overrun. Have a conditional
statement to handle this.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.19.1, < 6.1.119 | 6.1.119 |
| linux/linux_kernel | ≥ 6.2, < 6.6.63 | 6.6.63 |
| linux/linux_kernel | ≥ 6.7, < 6.11.10 | 6.11.10 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |