CVE-2024-58016: safesetid: check size of policy writes

Description

In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffer with a large size to a sysfs entry with writes handled by handle_policy_update(), triggering a warning in kmalloc. Check the size specified for write buffers before allocating. [PM: subject tweak]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

aeca4e2ca65c1aeacfbe520684e6421719d99417 to < 976284b94f2021df09829e37a367e19b84d9e5f3affected
aeca4e2ca65c1aeacfbe520684e6421719d99417 to < ecf6a4a558097920447a6fb84dfdb279e2ac749aaffected
aeca4e2ca65c1aeacfbe520684e6421719d99417 to < a0dec65f88c8d9290dfa1d2ca1e897abe54c5881affected
aeca4e2ca65c1aeacfbe520684e6421719d99417 to < 96fae5bd1589731592d30b3953a90a77ef3928a6affected
aeca4e2ca65c1aeacfbe520684e6421719d99417 to < 36b385d0f2b4c0bf41d491e19075ecd990d2bf94affected
aeca4e2ca65c1aeacfbe520684e6421719d99417 to < c71d35676d46090c891b6419f253fb92a1a9f4ebaffected
aeca4e2ca65c1aeacfbe520684e6421719d99417 to < f09ff307c7299392f1c88f763299e24bc99811c7affected

Linux Linux

Default version status: affected

5.1affected
0 to < 5.1unaffected
5.10.235 to ≤ 5.10.*unaffected
5.15.179 to ≤ 5.15.*unaffected
6.1.129 to ≤ 6.1.*unaffected
6.6.78 to ≤ 6.6.*unaffected
6.12.14 to ≤ 6.12.*unaffected
6.13.3 to ≤ 6.13.*unaffected
6.14 to ≤ *unaffected

CVE-2024-58016

safesetid: check size of policy writes

Description

Affected products

Linux Linux

Linux Linux

References