CVE-2024-39499

2024-07-1213:15:12

Linux

web.nvd.nist.gov

linux kernel

vulnerability

cve-2024-39499

vmci

speculation leaks

event sanitization

coverity

user-space control

sast

synopsys

inc.

AI Score

6.3

Confidence

Low

EPSS

Percentile

13.4%

JSON

In the Linux kernel, the following vulnerability has been resolved:

vmci: prevent speculation leaks by sanitizing event in event_deliver()

Coverity spotted that event_msg is controlled by user-space,
event_msg->event_data.event is passed to event_deliver() and used
as an index without sanitization.

This change ensures that the event index is sanitized to mitigate any
possibility of speculative information leaks.

This bug was discovered and resolved using Coverity Static Analysis
Security Testing (SAST) by Synopsys, Inc.

Only compile tested, no access to HW.

Affected configurations

Vulners

Node

linuxlinux_kernelRange3.9–4.19.317

linuxlinux_kernelRange4.20.0–5.4.279

linuxlinux_kernelRange5.5.0–5.10.221

linuxlinux_kernelRange5.11.0–5.15.162

linuxlinux_kernelRange5.16.0–6.1.95

linuxlinux_kernelRange6.2.0–6.6.35

linuxlinux_kernelRange6.7.0–6.9.6

linuxlinux_kernelRange6.10.0≥

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:a:linux:linux_kernel::::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/misc/vmw_vmci/vmci_event.c"
    ],
    "versions": [
      {
        "version": "1d990201f9bb",
        "lessThan": "58730dfbd4ae",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "681967c4ff21",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "f70ff7373467",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "95ac3e773a1f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "95bac1c8bedb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "e293c6b38ac9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "757804e1c599",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1d990201f9bb",
        "lessThan": "8003f00d8953",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/misc/vmw_vmci/vmci_event.c"
    ],
    "versions": [
      {
        "version": "3.9",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.9",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.317",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.279",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.221",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.162",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.95",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.35",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9.6",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]