SB2024060545 - Integer underflow in Linux kernel io_uring
Published: June 5, 2024 Updated: May 13, 2025
Security Bulletin ID
SB2024060545
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Integer underflow (CVE-ID: CVE-2024-35827)
The vulnerability allows a local user to execute arbitrary code.
The vulnerability exists due to integer underflow within the io_recvmsg_mshot_prep() function in io_uring/net.c. A local user can execute arbitrary code.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/868ec868616438df487b9e2baa5a99f8662cc47c
- https://git.kernel.org/stable/c/59a534690ecc3af72c6ab121aeac1237a4adae66
- https://git.kernel.org/stable/c/0c8c74bb59e7d77554016efc34c2d10376985e5e
- https://git.kernel.org/stable/c/b6563ad0d599110bd5cf8f56c47d279c3ed796fe
- https://git.kernel.org/stable/c/8ede3db5061bb1fe28e2c9683329aafa89d2b1b4
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.83
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.23
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.11
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.2