製品・ソフトウェアに関する情報

JVN脆弱性詳細

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 20, 2024, midnight
Registration Date	Oct. 11, 2024, 11:50 a.m.
Last Update	Oct. 11, 2024, 11:50 a.m.

Affected System

Linux

Linux Kernel 4.19.21 以上 4.20 未満

Linux Kernel 4.20.8 以上 5.0 未満

Linux Kernel 5.0 以上 5.4.283 未満

Linux Kernel 5.11 以上 5.15.166 未満

Linux Kernel 5.16 以上 6.1.107 未満

Linux Kernel 5.5 以上 5.10.225 未満

Linux Kernel 6.11

Linux Kernel 6.2 以上 6.6.48 未満

Linux Kernel 6.7 以上 6.10.7 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-44988	https://www.cve.org/CVERecord?id=CVE-2024-44988
National Vulnerability Database (NVD)
2	CVE-2024-44988	https://nvd.nist.gov/vuln/detail/CVE-2024-44988

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net: dsa: mv88e6xxx: Fix out-of-bound access (050e727)	https://git.kernel.org/stable/c/050e7274ab2150cd212b2372595720e7b83a15bd
2	net: dsa: mv88e6xxx: Fix out-of-bound access (18b2e83)	https://git.kernel.org/stable/c/18b2e833daf049223ab3c2efdf8cdee08854c484
3	net: dsa: mv88e6xxx: Fix out-of-bound access (528876d)	https://git.kernel.org/stable/c/528876d867a23b5198022baf2e388052ca67c952
4	net: dsa: mv88e6xxx: Fix out-of-bound access (a10d033)	https://git.kernel.org/stable/c/a10d0337115a6d223a1563d853d4455f05d0b2e3
5	net: dsa: mv88e6xxx: Fix out-of-bound access (d39f5be)	https://git.kernel.org/stable/c/d39f5be62f098fe367d672b4dd4bc4b2b80e08e7
6	net: dsa: mv88e6xxx: Fix out-of-bound access (f7d8c2f)	https://git.kernel.org/stable/c/f7d8c2fabd39250cf2333fbf8eef67e837f90a5d
7	net: dsa: mv88e6xxx: Fix out-of-bound access (f87ce03)	https://git.kernel.org/stable/c/f87ce03c652dba199aef15ac18ade3991db5477e
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月11日] 掲載	Oct. 11, 2024, 11:50 a.m.

NVD Vulnerability Information

CVE-2024-44988

Summary	In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array).
Publication Date	Sept. 5, 2024, 5:15 a.m.
Registration Date	Sept. 5, 2024, noon
Last Update	Nov. 9, 2024, 1:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/d39f5be62f098fe367d672b4dd4bc4b2b80e08e7	Patch
2	https://git.kernel.org/stable/c/050e7274ab2150cd212b2372595720e7b83a15bd	Patch
3	https://git.kernel.org/stable/c/a10d0337115a6d223a1563d853d4455f05d0b2e3	Patch
4	https://git.kernel.org/stable/c/18b2e833daf049223ab3c2efdf8cdee08854c484	Patch
5	https://git.kernel.org/stable/c/f7d8c2fabd39250cf2333fbf8eef67e837f90a5d	Patch
6	https://git.kernel.org/stable/c/f87ce03c652dba199aef15ac18ade3991db5477e	Patch
7	https://git.kernel.org/stable/c/528876d867a23b5198022baf2e388052ca67c952	Patch
8	https://git.kernel.org/stable/c/4a88fca95c8df3746b71e31f44a02d35f06f9864

Common Vulnerabilities List