Out-of-bounds read in Linux kernel controller dwc driver

1) Out-of-bounds read

EUVDB-ID: #VU98914

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47751

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the kirin_pcie_parse_port() function in drivers/pci/controller/dwc/pcie-kirin.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.1 - 6.11.1

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:6.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1:rc3:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1:rc7:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.1.6:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/a5f795f9412854df28e66679c5e6b68b0b79c229
https://git.kernel.org/stable/c/95248d7497bcbfe7deed4805469c6ff6ddd7f9d1
https://git.kernel.org/stable/c/6dcc5b49d6607a741a14122bf3105f3ac50d259e
https://git.kernel.org/stable/c/aeb0335971806e15ac91e838ca471936c8e7efd5
https://git.kernel.org/stable/c/c500a86693a126c9393e602741e348f80f1b0fc5
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.113
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.13
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.2
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.54

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.