CVE-2024-58010CWE-190

CVE-2024-58010

High · published February 27, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
18.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

binfmt_flat: Fix integer overflow bug on 32 bit systems

Most of these sizes and counts are capped at 256MB so the math doesn't

result in an integer overflow. The "relocs" count needs to be checked

as well. Otherwise on 32bit systems the calculation of "full_data"

could be wrong.

full_data = data_len + relocs * sizeof(unsigned long);

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.2th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-02-27T08:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 4.8, < 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.786.6.78
linux/linux_kernel≥ 6.7, < 6.12.146.12.14
linux/linux_kernel≥ 6.13, < 6.13.36.13.3
References (10)
EPSS history
Timeline
  • 27 FEB 02:12Z
    binfmt_flat: Fix integer overflow bug on 32 bit systems
    cvelistv5