CVE-2024-50007

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50007
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity check of the array index to fit in the array size.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/219587bca2678e31700ef09ecec178ba1f735674 Patch
https://git.kernel.org/stable/c/36ee4021bcc37b834996e79740d095d6f8dd948f Patch
https://git.kernel.org/stable/c/e658227d9d4f4e122d81690fdbc0d438b10288f5 Patch
https://git.kernel.org/stable/c/7a55740996701f7b2bc46dc988b60ef2e416a747 Patch
https://git.kernel.org/stable/c/ad7248a5e92587b9266c62db8bcc4e58de53e372 Patch
https://git.kernel.org/stable/c/876d04bf5a8ac1d6af5afd258cd37ab83ab2cf3d Patch
https://git.kernel.org/stable/c/7b986c7430a6bb68d523dac7bfc74cbd5b44ef96 Patch
https://git.kernel.org/stable/c/a6bdb691cf7b66dcd929de1a253c5c42edd2e522
https://git.kernel.org/stable/c/ce2953e44829ec54bcbb57e9d890fc8af0900c80
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Nov 2024, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/a6bdb691cf7b66dcd929de1a253c5c42edd2e522 -
  • () https://git.kernel.org/stable/c/ce2953e44829ec54bcbb57e9d890fc8af0900c80 -

01 Nov 2024, 15:34

Type Values Removed Values Added
CWE CWE-129
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/36ee4021bcc37b834996e79740d095d6f8dd948f - () https://git.kernel.org/stable/c/36ee4021bcc37b834996e79740d095d6f8dd948f - Patch
References () https://git.kernel.org/stable/c/7a55740996701f7b2bc46dc988b60ef2e416a747 - () https://git.kernel.org/stable/c/7a55740996701f7b2bc46dc988b60ef2e416a747 - Patch
References () https://git.kernel.org/stable/c/e658227d9d4f4e122d81690fdbc0d438b10288f5 - () https://git.kernel.org/stable/c/e658227d9d4f4e122d81690fdbc0d438b10288f5 - Patch
References () https://git.kernel.org/stable/c/876d04bf5a8ac1d6af5afd258cd37ab83ab2cf3d - () https://git.kernel.org/stable/c/876d04bf5a8ac1d6af5afd258cd37ab83ab2cf3d - Patch
References () https://git.kernel.org/stable/c/ad7248a5e92587b9266c62db8bcc4e58de53e372 - () https://git.kernel.org/stable/c/ad7248a5e92587b9266c62db8bcc4e58de53e372 - Patch
References () https://git.kernel.org/stable/c/219587bca2678e31700ef09ecec178ba1f735674 - () https://git.kernel.org/stable/c/219587bca2678e31700ef09ecec178ba1f735674 - Patch
References () https://git.kernel.org/stable/c/7b986c7430a6bb68d523dac7bfc74cbd5b44ef96 - () https://git.kernel.org/stable/c/7b986c7430a6bb68d523dac7bfc74cbd5b44ef96 - Patch

21 Oct 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 19:15

Updated : 2024-11-08 16:15

NVD link : CVE-2024-50007

Mitre link : CVE-2024-50007

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index