Description
In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < 81a15d28f32af01493ae8c5457e0d55314a4167daffected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < b59a5e86a3934f1b6a5bd1368902dbc79bdecc90affected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < 648d5490460d38436640da0812bf7f6351c150d2affected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < c5ee8adc8d98a49703320d13878ba2b923b142f5affected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < 68d63ace80b76395e7935687ecdb86421adc2168affected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < 57fe01d3d04276875c7e3a6dc763517fc05b8762affected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < d4663536754defff75ff1eca0aaebc41da165a8daffected9b3fa47d4a76b1d606a396455f9bbeee083ef008 to < dd6e9894b451e7c85cceb8e9dc5432679a70e7dcaffected
Linux Linux
Default version status: affected
4.15affected0 to < 4.15unaffected4.19.320 to ≤ 4.19.*unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/81a15d28f32af01493ae8c5457e0d55314a4167d ↗
- https://git.kernel.org/stable/c/b59a5e86a3934f1b6a5bd1368902dbc79bdecc90 ↗
- https://git.kernel.org/stable/c/648d5490460d38436640da0812bf7f6351c150d2 ↗
- https://git.kernel.org/stable/c/c5ee8adc8d98a49703320d13878ba2b923b142f5 ↗
- https://git.kernel.org/stable/c/68d63ace80b76395e7935687ecdb86421adc2168 ↗
- https://git.kernel.org/stable/c/57fe01d3d04276875c7e3a6dc763517fc05b8762 ↗
- https://git.kernel.org/stable/c/d4663536754defff75ff1eca0aaebc41da165a8d ↗
- https://git.kernel.org/stable/c/dd6e9894b451e7c85cceb8e9dc5432679a70e7dc ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗