Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-58010

binfmt_flat: Fix integer overflow bug on 32 bit systems

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: binfmt_flat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit systems the calculation of "full_data" could be wrong. full_data = data_len + relocs * sizeof(unsigned long);

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < 0b6be54d7386b7addbf9e5947366f94aad046938affected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < 6fb98e0576ea155267e206286413dcb3a3d55c12affected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < bc8ca18b8ef4648532c001bd6c8151143b569275affected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < 95506c7f33452450346fbe2975c1359100f854caaffected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < d17ca8f2dfcf423c439859995910a20e38b86f00affected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < a009378af674b808efcca1e2e67916e79ce866b3affected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < 8e8cd712bb06a507b26efd2a56155076aa454345affected
  • c995ee28d29d6f256c3a8a6c4e66469554374f25 to < 55cf2f4b945f6a6416cc2524ba740b83cc9af25aaffected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.78 to ≤ 6.6.*unaffected
  • 6.12.14 to ≤ 6.12.*unaffected
  • 6.13.3 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References