Kernel: stack overflow problem in open vswitch kernel module leading to dos
Summary
A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this...
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2024-1151 linux Fix available
- Ubuntu UBUNTU-CVE-2024-1151 linux-xilinx-zynqmp, linux-starfive-6.5, linux-riscv-5.15 +42 more Fix available
Original description The description as published by the source.
A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- advisory access.redhat.com
- advisory bugzilla.redhat.com
- issue access.redhat.com
- issue access.redhat.com
- patch lore.kernel.org
- web secalert@redhat.com
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org