CISA-2024-38579 — Vulnetix

CISA-2024-38579 PUBLISHED

Reported by Linux · Published June 19, 2024

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected Products

Vendor	Product	Versions
Linux	Linux	9d12ba86f818aa9cfe9f01b750336aa441f2ffa2, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2
Linux	Linux	4.11, 0, 4.19.316
linux	linux_kernel	4.11, 4.11, 4.11
Linux	Linux	9d12ba86f818aa9cfe9f01b750336aa441f2ffa2, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2, 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2

Timeline

Jun 19, 2024 CVE Published
Nov 4, 2025 CVE Updated

References

https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html url

Open in Interactive Console →