In the Linux kernel, the following vulnerability has been resolved:
hwmon: (coretemp) Fix out-of-bounds memory access
Fix a bug that pdata->cpu_map[] is set before out-of-bounds check.
The problem might be triggered on systems with more than 128 cores per
package.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/hwmon/coretemp.c"
],
"versions": [
{
"version": "4f9dcadc55c2",
"lessThan": "93f0f4e846fc",
"status": "affected",
"versionType": "git"
},
{
"version": "c00cdfc9bd76",
"lessThan": "1eb74c00c9c3",
"status": "affected",
"versionType": "git"
},
{
"version": "d9f0159da05d",
"lessThan": "f0da068c75c2",
"status": "affected",
"versionType": "git"
},
{
"version": "30cf0dee372b",
"lessThan": "a16afec8e83c",
"status": "affected",
"versionType": "git"
},
{
"version": "7108b80a542b",
"lessThan": "9bce69419271",
"status": "affected",
"versionType": "git"
},
{
"version": "7108b80a542b",
"lessThan": "853a6503c586",
"status": "affected",
"versionType": "git"
},
{
"version": "7108b80a542b",
"lessThan": "3a7753bda559",
"status": "affected",
"versionType": "git"
},
{
"version": "7108b80a542b",
"lessThan": "4e440abc8945",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"drivers/hwmon/coretemp.c"
],
"versions": [
{
"version": "6.1",
"status": "affected"
},
{
"version": "0",
"lessThan": "6.1",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "4.19.307",
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.269",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.210",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.15.149",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.1.78",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.6.17",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.7.5",
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "6.8",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/1eb74c00c9c3b13cb65e508c5d5a2f11afb96b8b
git.kernel.org/stable/c/3a7753bda55985dc26fae17795cb10d825453ad1
git.kernel.org/stable/c/4e440abc894585a34c2904a32cd54af1742311b3
git.kernel.org/stable/c/853a6503c586a71abf27e60a7f8c4fb28092976d
git.kernel.org/stable/c/93f0f4e846fcb682c3ec436e3b2e30e5a3a8ee6a
git.kernel.org/stable/c/9bce69419271eb8b2b3ab467387cb59c99d80deb
git.kernel.org/stable/c/a16afec8e83c56b14a4a73d2e3fb8eec3a8a057e
git.kernel.org/stable/c/f0da068c75c20ffc5ba28243ff577531dc2af1fd
lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.debian.org/debian-lts-announce/2024/06/msg00020.html