CVE-2024-58010

In the Linux kernel, the following vulnerability has been resolved: binfmt_flat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit systems the calculation of "full_data" could be wrong. full_data = data_len + relocs * sizeof(unsigned long);
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

13 Mar 2025, 13:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/bc8ca18b8ef4648532c001bd6c8151143b569275 -
  • () https://git.kernel.org/stable/c/6fb98e0576ea155267e206286413dcb3a3d55c12 -
  • () https://git.kernel.org/stable/c/0b6be54d7386b7addbf9e5947366f94aad046938 -

06 Mar 2025, 12:42

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/d17ca8f2dfcf423c439859995910a20e38b86f00 - () https://git.kernel.org/stable/c/d17ca8f2dfcf423c439859995910a20e38b86f00 - Patch
References () https://git.kernel.org/stable/c/a009378af674b808efcca1e2e67916e79ce866b3 - () https://git.kernel.org/stable/c/a009378af674b808efcca1e2e67916e79ce866b3 - Patch
References () https://git.kernel.org/stable/c/8e8cd712bb06a507b26efd2a56155076aa454345 - () https://git.kernel.org/stable/c/8e8cd712bb06a507b26efd2a56155076aa454345 - Patch
References () https://git.kernel.org/stable/c/55cf2f4b945f6a6416cc2524ba740b83cc9af25a - () https://git.kernel.org/stable/c/55cf2f4b945f6a6416cc2524ba740b83cc9af25a - Patch
References () https://git.kernel.org/stable/c/95506c7f33452450346fbe2975c1359100f854ca - () https://git.kernel.org/stable/c/95506c7f33452450346fbe2975c1359100f854ca - Patch

27 Feb 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-27 03:15

Updated : 2025-03-13 13:15


NVD link : CVE-2024-58010

Mitre link : CVE-2024-58010


JSON object : View

Products Affected

linux

  • linux_kernel
CWE

No CWE.