Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41026
HistoryJul 29, 2024 - 2:31 p.m.

CVE-2024-41026 mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length

2024-07-2914:31:43
Linux
github.com
1
linux kernel
davinci_mmc
transmitted data
kernel panic
sg_miter's length
vulnerability

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm’s length

No check is done on the size of the data to be transmiited. This causes
a kernel panic when this size exceeds the sg_miter’s length.

Limit the number of transmitted bytes to sgm->length.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-41026