Kernel: stack overflow problem in open vswitch kernel module leading to dos
概要
A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this...
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の記録です。修正版は配布版ごとに違うので、リンク先で確かめてください。
- Debian DEBIAN-CVE-2024-1151 linux 修正版あり
- Ubuntu UBUNTU-CVE-2024-1151 linux-xilinx-zynqmp, linux-starfive-6.5, linux-riscv-5.15 ほか 42 件 修正版あり
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.
出典: CVE.org (CVE Program・cvelistV5) NVD
参照URL
- advisory access.redhat.com
- advisory bugzilla.redhat.com
- issue access.redhat.com
- issue access.redhat.com
- patch lore.kernel.org
- web secalert@redhat.com
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org