CVE-2024-42242

2024-08-0817:47:33

redhat.com

access.redhat.com

cve-2024-42242

linux kernel

mmc

sdhci

maximum segment size

vulnerability

security fix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

Percentile

9.5%

JSON

A flaw was found in the mmc: sdhci driver in the Linux kernel, caused by setting the maximum segment size below the required page size (PAGE_SIZE). This discrepancy leads to validation errors and potential issues in handling I/O operations. The fix involved updating the sdhci driver to ensure that the maximum segment size is always at least the PAGE_SIZE, thereby aligning with kernel requirements and preventing errors related to segment size limits.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.