CVE-2024-45014 - s390/boot: Avoid possible physmem_info segment corruption

Back Back to CVE browser

MEDIUM

s390/boot: Avoid possible physmem_info segment corruption

Published Sep 11, 2024

6.0

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

When physical memory for the kernel image is allocated it does not consider extra memory required for offsetting the image start to match it with the lower 20 bits of KASLR virtual base address. That might lead to kernel access beyond its memory range.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  693d41f7c938
  Status
  affected
  Constraints
  <a944cba5d576
- Version
  693d41f7c938
  Status
  affected
  Constraints
  <d7fd2941ae9a
Vendor Linux Product Linux Default
affected
- Version
  6.10
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <6.10
- Version
  6.10.7
  Status
  unaffected
  Constraints
  <=6.10.*
- Version
  6.11
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
693d41f7c938	affected	<a944cba5d576
693d41f7c938	affected	<d7fd2941ae9a

Linux

affected

Version	Status	Constraints
6.10	affected	-
0	unaffected	<6.10
6.10.7	unaffected	<=6.10.*
6.11	unaffected	<=*

Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-770

Allocation of Resources Without Limits

References (7)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-45014		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2311711		Issue Tracking
https://git.kernel.org/stable/c/a944cba5d57687b747023c3bc074fcf9c790f7df		Patch
https://git.kernel.org/stable/c/d7fd2941ae9a67423d1c7bee985f240e4686634f		Patch
https://lore.kernel.org/linux-cve-announce/2024091107-CVE-2024-45014-2925@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-45014
https://www.cve.org/CVERecord?id=CVE-2024-45014