Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2024-42292: Linux kernel may copy data beyond buffer
CVE-2024-42292 · published 2 years ago
Summary
The core Linux operating system could move memory to the wrong size when handling certain environment variables, potentially overwriting nearby data. This can lead to instability or allow an attacker to manipulate the system. Update the kernel to the latest version provided by your Linux distribution to apply the fix.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1135.145~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1140.147~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1139.148~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-200.220~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1082.87~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1134.143~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1119.131~18.04.1.
- Update canonical linux to version 5.4.0-200.220.
- Update canonical linux-aws to version 5.4.0-1135.145.
- Update canonical linux-aws-5.15 to version 5.15.0-1072.78~20.04.1.
- Update canonical linux-azure to version 5.4.0-1140.147.
- Update canonical linux-azure-5.15 to version 5.15.0-1078.87~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1095.102.
- Update canonical linux-gcp to version 5.4.0-1139.148.
- Update canonical linux-gcp-5.15 to version 5.15.0-1071.79~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1102.106.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1055.62~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-125.135~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1082.87.
- Update canonical linux-ibm-5.15 to version 5.15.0-1065.68~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1067.73~20.04.1.
- Update canonical linux-iot to version 5.4.0-1044.45.
- Update canonical linux-kvm to version 5.4.0-1123.131.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-125.135~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1032.32~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1134.143.
- Update canonical linux-oracle-5.15 to version 5.15.0-1070.76~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1119.131.
- Update canonical linux-riscv-5.15 to version 5.15.0-1068.72~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1054.58.
- Update canonical linux-aws-fips to version 5.4.0-1135.145+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1140.147+fips1.
- Update canonical linux-fips to version 5.4.0-1109.119.
- Update canonical linux-gcp-fips to version 5.4.0-1139.148+fips1.
- Update canonical linux to version 5.15.0-125.135.
- Update canonical linux-aws to version 5.15.0-1072.78.
- Update canonical linux-aws-6.8 to version 6.8.0-1020.22~22.04.1.
- Update canonical linux-azure to version 5.15.0-1075.84.
- Update canonical linux-azure-6.8 to version 6.8.0-1020.23~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1071.79.
- Update canonical linux-gcp-6.8 to version 6.8.0-1019.21~22.04.1.
- Update canonical linux-gke to version 5.15.0-1069.75.
- Update canonical linux-gkeop to version 5.15.0-1055.62.
- Update canonical linux-hwe-6.8 to version 6.8.0-50.51~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1065.68.
- Update canonical linux-ibm-6.8 to version 6.8.0-1017.17~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1067.73.
- Update canonical linux-kvm to version 5.15.0-1069.74.
- Update canonical linux-lowlatency to version 5.15.0-125.135.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-50.51.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1067.68.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1019.21~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1032.32.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1020.20.
- Update canonical linux-oracle to version 5.15.0-1070.76.
- Update canonical linux-oracle-6.8 to version 6.8.0-1017.18~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1065.68.
- Update canonical linux-riscv-6.8 to version 6.8.0-50.51.1~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1038.42.
- Update canonical linux-bluefield to version 5.15.0-1056.58.
- Update canonical linux-aws-fips to version 5.15.0-1072.78+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1075.84+fips1.
- Update canonical linux-fips to version 5.15.0-125.135+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1071.79+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1066.68.
- Update canonical linux-realtime to version 5.15.0-1073.81.
- Update canonical linux-realtime-6.8 to version 6.8.1-1013.14~22.04.1.
- Update canonical linux to version 6.8.0-50.51.
- Update canonical linux-aws to version 6.8.0-1020.22.
- Update canonical linux-azure to version 6.8.0-1020.23.
- Update canonical linux-gcp to version 6.8.0-1019.21.
- Update canonical linux-gke to version 6.8.0-1015.19.
- Update canonical linux-gkeop to version 6.8.0-1002.4.
- Update canonical linux-ibm to version 6.8.0-1017.17.
- Update canonical linux-lowlatency to version 6.8.0-50.51.1.
- Update canonical linux-nvidia to version 6.8.0-1019.21.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1019.21.1.
- Update canonical linux-oem-6.8 to version 6.8.0-1018.18.
- Update canonical linux-oracle to version 6.8.0-1017.18.
- Update canonical linux-raspi to version 6.8.0-1016.18.
- Update canonical linux-riscv to version 6.8.0-50.51.1.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2015.16.
- Update canonical linux-realtime to version 6.8.1-1013.14.
- Update debian linux to version 6.1.106-1.
- Update debian linux to version 6.10.3-1.
- Update linux kernel to version 6.10.3.
- Update canonical linux-azure-fde to version 5.15.0-1076.85.1.
- Update linux linux to version 81a15d28f32af01493ae8c5457e0d55314a4167d or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 4.15.1, < 4.19.320 >= 4.20, < 5.4.282 >= 5.5, < 5.10.224 >= 5.11, < 5.15.165 >= 5.16, < 6.1.103 >= 6.2, < 6.6.44 >= 6.7, < 6.10.3 4.15 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1135.145~18.04.1 Fix: upgrade to 5.4.0-1135.145~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1140.147~18.04.1 Fix: upgrade to 5.4.0-1140.147~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1139.148~18.04.1 Fix: upgrade to 5.4.0-1139.148~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-200.220~18.04.1 Fix: upgrade to 5.4.0-200.220~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1082.87~18.04.1 Fix: upgrade to 5.4.0-1082.87~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1134.143~18.04.1 Fix: upgrade to 5.4.0-1134.143~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1119.131~18.04.1 Fix: upgrade to 5.4.0-1119.131~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-200.220 Fix: upgrade to 5.4.0-200.220
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1135.145 Fix: upgrade to 5.4.0-1135.145
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1072.78~20.04.1 Fix: upgrade to 5.15.0-1072.78~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1140.147 Fix: upgrade to 5.4.0-1140.147
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1078.87~20.04.1 Fix: upgrade to 5.15.0-1078.87~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1095.102 Fix: upgrade to 5.4.0-1095.102
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1139.148 Fix: upgrade to 5.4.0-1139.148
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1071.79~20.04.1 Fix: upgrade to 5.15.0-1071.79~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1102.106 Fix: upgrade to 5.4.0-1102.106
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1055.62~20.04.1 Fix: upgrade to 5.15.0-1055.62~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-125.135~20.04.1 Fix: upgrade to 5.15.0-125.135~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1082.87 Fix: upgrade to 5.4.0-1082.87
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1065.68~20.04.1 Fix: upgrade to 5.15.0-1065.68~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1067.73~20.04.1 Fix: upgrade to 5.15.0-1067.73~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1044.45 Fix: upgrade to 5.4.0-1044.45
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1123.131 Fix: upgrade to 5.4.0-1123.131
|
Showing 50 of 175. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-125.135~20.04.1 Fix: upgrade to 5.15.0-125.135~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1032.32~20.04.1 Fix: upgrade to 5.15.0-1032.32~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1134.143 Fix: upgrade to 5.4.0-1134.143
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1070.76~20.04.1 Fix: upgrade to 5.15.0-1070.76~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1119.131 Fix: upgrade to 5.4.0-1119.131
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1068.72~20.04.1 Fix: upgrade to 5.15.0-1068.72~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1054.58 Fix: upgrade to 5.4.0-1054.58
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1135.145+fips1 Fix: upgrade to 5.4.0-1135.145+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1140.147+fips1 Fix: upgrade to 5.4.0-1140.147+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1109.119 Fix: upgrade to 5.4.0-1109.119
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1139.148+fips1 Fix: upgrade to 5.4.0-1139.148+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-125.135 Fix: upgrade to 5.15.0-125.135
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1072.78 Fix: upgrade to 5.15.0-1072.78
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1020.22~22.04.1 Fix: upgrade to 6.8.0-1020.22~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1075.84 Fix: upgrade to 5.15.0-1075.84
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1020.23~22.04.1 Fix: upgrade to 6.8.0-1020.23~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1071.79 Fix: upgrade to 5.15.0-1071.79
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1019.21~22.04.1 Fix: upgrade to 6.8.0-1019.21~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1069.75 Fix: upgrade to 5.15.0-1069.75
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1055.62 Fix: upgrade to 5.15.0-1055.62
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-50.51~22.04.1 Fix: upgrade to 6.8.0-50.51~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1065.68 Fix: upgrade to 5.15.0-1065.68
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1017.17~22.04.1 Fix: upgrade to 6.8.0-1017.17~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1067.73 Fix: upgrade to 5.15.0-1067.73
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1069.74 Fix: upgrade to 5.15.0-1069.74
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-125.135 Fix: upgrade to 5.15.0-125.135
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-50.51.1~22.04.1 Fix: upgrade to 6.8.0-50.51.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1067.68 Fix: upgrade to 5.15.0-1067.68
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1019.21~22.04.1 Fix: upgrade to 6.8.0-1019.21~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1032.32 Fix: upgrade to 5.15.0-1032.32
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1020.20 Fix: upgrade to 5.15.0-1020.20
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1070.76 Fix: upgrade to 5.15.0-1070.76
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1017.18~22.04.1 Fix: upgrade to 6.8.0-1017.18~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1065.68 Fix: upgrade to 5.15.0-1065.68
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-50.51.1~22.04.1 Fix: upgrade to 6.8.0-50.51.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1038.42 Fix: upgrade to 5.15.0-1038.42
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1056.58 Fix: upgrade to 5.15.0-1056.58
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1072.78+fips1 Fix: upgrade to 5.15.0-1072.78+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1075.84+fips1 Fix: upgrade to 5.15.0-1075.84+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-125.135+fips1 Fix: upgrade to 5.15.0-125.135+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1071.79+fips1 Fix: upgrade to 5.15.0-1071.79+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1066.68 Fix: upgrade to 5.15.0-1066.68
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1073.81 Fix: upgrade to 5.15.0-1073.81
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1013.14~22.04.1 Fix: upgrade to 6.8.1-1013.14~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-50.51 Fix: upgrade to 6.8.0-50.51
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1020.22 Fix: upgrade to 6.8.0-1020.22
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1020.23 Fix: upgrade to 6.8.0-1020.23
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1019.21 Fix: upgrade to 6.8.0-1019.21
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1015.19 Fix: upgrade to 6.8.0-1015.19
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1002.4 Fix: upgrade to 6.8.0-1002.4
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1017.17 Fix: upgrade to 6.8.0-1017.17
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-50.51.1 Fix: upgrade to 6.8.0-50.51.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1019.21 Fix: upgrade to 6.8.0-1019.21
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1019.21.1 Fix: upgrade to 6.8.0-1019.21.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1018.18 Fix: upgrade to 6.8.0-1018.18
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1016.18 Fix: upgrade to 6.8.0-1016.18
|
| Ubuntu:24.04:LTS | canonical | linux-riscv |
< 6.8.0-50.51.1 Fix: upgrade to 6.8.0-50.51.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2015.16 Fix: upgrade to 6.8.0-2015.16
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1013.14 Fix: upgrade to 6.8.1-1013.14
|
| Debian:12 | debian | linux |
< 6.1.106-1 Fix: upgrade to 6.1.106-1
|
| Debian:13 | debian | linux |
< 6.10.3-1 Fix: upgrade to 6.10.3-1
|
| – | linux | linux |
< 81a15d28f32af01493ae8c5457e0d55314a4167d 4.15 |
| Linux | linux | kernel |
>= 6.7.0, < 6.10.3 Fix: upgrade to 6.10.3
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1076.85.1 Fix: upgrade to 5.15.0-1076.85.1
|
Original advisory text
kobject_uevent: Fix OOB access within zap_modalias_env()
In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42292... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-42292 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://security-tracker.debian.org/tracker/CVE-2024-42292 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-42292 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-42292 Third Party Advisory
- https://git.kernel.org/linus/dd6e9894b451e7c85cceb8e9dc5432679a70e7dc Third Party Advisory
- https://git.kernel.org/stable/c/68d63ace80b76395e7935687ecdb86421adc2168 Third Party Advisory
- https://git.kernel.org/stable/c/81a15d28f32af01493ae8c5457e0d55314a4167d Third Party Advisory
- https://git.kernel.org/stable/c/b59a5e86a3934f1b6a5bd1368902dbc79bdecc90 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html URL
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html URL
- https://git.kernel.org/stable/c/57fe01d3d04276875c7e3a6dc763517fc05b8762 Third Party Advisory
- https://git.kernel.org/stable/c/d4663536754defff75ff1eca0aaebc41da165a8d Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html URL
- https://git.kernel.org/stable/c/dd6e9894b451e7c85cceb8e9dc5432679a70e7dc Third Party Advisory
- https://git.kernel.org/stable/c/648d5490460d38436640da0812bf7f6351c150d2 Third Party Advisory
- https://git.kernel.org/stable/c/c5ee8adc8d98a49703320d13878ba2b923b142f5 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7100-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7100-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7088-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7119-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7123-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7144-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7154-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7155-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7088-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7088-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7088-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7088-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7156-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7154-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7194-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7196-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published17 Aug 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-42292 · NVD
CVE-2024-42292 · OSV
UBUNTU-CVE-2024-42292 · OSV
DEBIAN-CVE-2024-42292 · OSV
CVE-2024-42292 · MITRE
Track software like this
Free during beta