Out-of-bounds read in Linux kernel thunderbolt driver

1) Out-of-bounds read

EUVDB-ID: #VU100171

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50227

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the tb_retimer_scan() function in drivers/thunderbolt/retimer.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.11 - 6.11.6

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:6.11:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.4:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.5:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.11.6:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/08b2771e9270fbe1ed4fbbe93abe05ac7fe9861d
https://git.kernel.org/stable/c/e9e1b20fae7de06ba36dd3f8dba858157bad233d
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11.7
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.