Lucene search

CVE-2024-49886

🗓️ 21 Oct 2024 18:11:15Reported by LinuxType

In Linux kernel, fixed platform/x86 ISST vulnerability causing "BUG: KASAN: slab-out-of-bounds" when attaching SST PCI device to V

Reporter	Title	Published	Views	Family All 70
Debian CVE	CVE-2024-49886	21 Oct 202418:15	–	debiancve
RedhatCVE	CVE-2024-49886	22 Oct 202412:39	–	redhatcve
NVD	CVE-2024-49886	21 Oct 202418:15	–	nvd
OSV	UBUNTU-CVE-2024-49886	21 Oct 202418:15	–	osv
OSV	CVE-2024-49886	21 Oct 202418:15	–	osv
OSV	linux, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities	17 Dec 202413:14	–	osv
OSV	linux-xilinx-zynqmp vulnerabilities	20 Jan 202512:52	–	osv
OSV	linux-intel-iotg vulnerabilities	6 Jan 202521:05	–	osv
OSV	linux-azure, linux-intel-iotg-5.15 vulnerabilities	9 Jan 202511:22	–	osv
OSV	linux-aws, linux-aws-5.15 vulnerabilities	17 Dec 202423:22	–	osv

Nvd

Vulners

Node

linux linux_kernelRange5.15.115–5.15.168

linux linux_kernelRange6.0–6.1.113

linux linux_kernelRange6.2–6.6.55

linux linux_kernelRange6.7–6.10.14

linux linux_kernelRange6.11–6.11.3

linux linux_kernelMatch6.12rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/platform/x86/intel/speed_select_if/isst_if_common.c"
    ],
    "versions": [
      {
        "version": "017a634f9f38ae704d9d57817555773de700219e",
        "lessThan": "1973c4d8ee0782a808303d75e3be9c12baaacd97",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9a1aac8a96dc014bec49806a7a964bf2fdbd315f",
        "lessThan": "cdd03afcb6eda3103da5a0948d3db12372f62910",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9a1aac8a96dc014bec49806a7a964bf2fdbd315f",
        "lessThan": "8176d4878ed2af5d93ddd0e971e24c412124d38b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9a1aac8a96dc014bec49806a7a964bf2fdbd315f",
        "lessThan": "cebc705b097d5c16469b141a25e840161d1c517a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9a1aac8a96dc014bec49806a7a964bf2fdbd315f",
        "lessThan": "afa7f78d9a907cfded6c98c91aae2bf7b3b56e51",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "9a1aac8a96dc014bec49806a7a964bf2fdbd315f",
        "lessThan": "7d59ac07ccb58f8f604f8057db63b8efcebeb3de",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/platform/x86/intel/speed_select_if/isst_if_common.c"
    ],
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.168",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.113",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.55",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.10.14",
        "lessThanOrEqual": "6.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.11.3",
        "lessThanOrEqual": "6.11.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/8176d4878ed2af5d93ddd0e971e24c412124d38b
git	www.git.kernel.org/stable/c/7d59ac07ccb58f8f604f8057db63b8efcebeb3de
git	www.git.kernel.org/stable/c/afa7f78d9a907cfded6c98c91aae2bf7b3b56e51
git	www.git.kernel.org/stable/c/cebc705b097d5c16469b141a25e840161d1c517a
git	www.git.kernel.org/stable/c/cdd03afcb6eda3103da5a0948d3db12372f62910
git	www.git.kernel.org/stable/c/1973c4d8ee0782a808303d75e3be9c12baaacd97

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Oct 2024 18:15Current

5Medium risk

Vulners AI Score5

CVSS35.5

EPSS0.0004

SSVC