Off-by-one in Linux kernel - CVE-2024-23849

 

Off-by-one in Linux kernel - CVE-2024-23849

Published: February 1, 2024


Vulnerability identifier: #VU86019
CSH Severity: Low
CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-23849
CWE-ID: CWE-193
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an off-by-one error within the rds_recv_track_latency() function in net/rds/af_rds.c. A local user can trigger an off-by-one error and perform a denial of service (DoS) attack.


Affected software

Linux kernel
Debian Linux
Amazon Linux AMI
Slackware Linux
Ubuntu
openEuler
Fedora
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
Storage Resource Manager
Dell Policy Manager for Secure Connect Gateway (SCG)
EMC Cloud Tiering Appliance
SmartFabric Storage Software
linux-image-ibm (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-5.4.0-181-lowlatency (Ubuntu package)
linux-image-5.4.0-181-generic (Ubuntu package)
linux-image-5.4.0-1129-azure (Ubuntu package)
linux-image-5.4.0-1128-gcp (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1124-aws (Ubuntu package)
linux-image-5.4.0-1123-oracle (Ubuntu package)
linux-image-5.4.0-1108-raspi (Ubuntu package)
linux-image-5.4.0-1071-ibm (Ubuntu package)
kernel
python2-perf-debuginfo
kernel-tools-devel
bpftool
kernel-debuginfo
perf
kernel-devel
kernel-tools
kernel-source
bpftool-debuginfo
perf-debuginfo
python2-perf
python3-perf-debuginfo
kernel-debugsource
python3-perf
kernel-tools-debuginfo
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-5.4.0-181-generic-lpae (Ubuntu package)
linux-image-5.4.0-1036-iot (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.4.0-1043-xilinx-zynqmp (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-bluefield (Ubuntu package)
linux-image-5.4.0-1084-bluefield (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.4.0-1091-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1112-kvm (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
kernel-headers
linux (Debian package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-106-lowlatency-64k (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-5.15.0-106-generic (Ubuntu package)
linux-image-5.15.0-106-generic-64k (Ubuntu package)
linux-image-5.15.0-106-generic-lpae (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-106-lowlatency (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1044-gkeop (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1054-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1054-nvidia (Ubuntu package)
linux-image-5.15.0-1054-raspi (Ubuntu package)
linux-image-5.15.0-1054-ibm (Ubuntu package)
linux-image-5.15.0-1057-intel-iotg (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1058-kvm (Ubuntu package)
linux-image-5.15.0-1058-gke (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1059-oracle (Ubuntu package)
linux-image-5.15.0-1059-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1061-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1063-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-5.15.0-1063-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-5.15.160/kernel-modules
linux-5.15.160/kernel-huge
linux-5.15.160/kernel-generic
linux-5.15.160/kernel-headers
linux-image-6.1.0-1035-oem (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
kernel-livepatch
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-41-generic-64k (Ubuntu package)
linux-image-6.5.0-41-generic (Ubuntu package)
linux-image-6.5.0-1017-laptop (Ubuntu package)
linux-image-laptop-23.10 (Ubuntu package)
linux-image-6.5.0-1021-nvidia (Ubuntu package)
linux-image-6.5.0-1021-nvidia-64k (Ubuntu package)
linux-image-nvidia-6.5 (Ubuntu package)
linux-image-nvidia-64k-6.5 (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-1022-oem (Ubuntu package)
linux-image-oem-22.04d (Ubuntu package)
Dell EMC Storage Monitoring and Reporting (SMR)
linux-image-intel-iotg (Ubuntu package)
Dell Secure Connect Gateway

How to mitigate CVE-2024-23849

Install updates from vendor's website.

SmartFabric Storage Software - update to 1.4.3
linux-image-ibm (Ubuntu package) - addressed in versions Ubuntu Pro, 5.15.0.1054.50, 5.15.0.1054.57~20.04.1
linux-image-oem-osp1 (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0.181.179
linux-image-oem (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.181.179
linux-image-5.4.0-181-lowlatency (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-181.201
linux-image-5.4.0-181-generic (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-181.201
linux-image-5.4.0-1129-azure (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1129.136
linux-image-5.4.0-1128-gcp (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1128.137
linux-image-aws (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1061.67~20.04.1
linux-image-azure (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1063.72~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1059.67~20.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-oracle (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1059.65~20.04.1
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-5.4.0-1124-aws (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1124.134
linux-image-5.4.0-1123-oracle (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1123.132
linux-image-5.4.0-1108-raspi (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1108.120
linux-image-5.4.0-1071-ibm (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1071.76
kernel - addressed in versions 4.14.336-180.562, 6.1.77-99.164
python2-perf-debuginfo - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263
kernel - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
kernel-tools-devel - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
bpftool - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153
kernel-debuginfo - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
perf - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
kernel-devel - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
kernel-tools - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
kernel-source - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
bpftool-debuginfo - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153
perf-debuginfo - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
python2-perf - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263
python3-perf-debuginfo - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
kernel-debugsource - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
python3-perf - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
kernel-tools-debuginfo - addressed in versions 4.19.90-2402.1.0.0237, 4.19.90-2402.1.0.0263, 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Storage Resource Manager - update to 5.0.1.0
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.181.179, 5.15.0.106.106
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.181.179, 5.15.0.106.106
linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.181.179, 5.15.0.106.106
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.181.179, 5.15.0.106.101
linux-image-5.4.0-181-generic-lpae (Ubuntu package) - update to 5.4.0-181.201
linux-image-5.4.0-1036-iot (Ubuntu package) - update to 5.4.0-1036.37
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.4.0.1043.43
linux-image-5.4.0-1043-xilinx-zynqmp (Ubuntu package) - update to 5.4.0-1043.47
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1071.100
linux-image-bluefield (Ubuntu package) - update to 5.4.0.1084.80
linux-image-5.4.0-1084-bluefield (Ubuntu package) - update to 5.4.0-1084.91
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1091.89
linux-image-gkeop (Ubuntu package) - addressed in versions 5.4.0.1091.89, 5.15.0.1044.43
linux-image-5.4.0-1091-gkeop (Ubuntu package) - update to 5.4.0-1091.95
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1108.138, 5.15.0.1054.52
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1108.138
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1112.108, 5.15.0.1058.54
linux-image-5.4.0-1112-kvm (Ubuntu package) - update to 5.4.0-1112.119
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1123.116
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1124.121
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1128.130
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1129.123
kernel-headers - addressed in versions 5.10.0-60.126.0.153, 5.10.0-136.64.0.144, 5.10.0-153.43.0.121, 5.10.0-186.0.0.99
linux (Debian package) - update to 5.10.216-1
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.106.101
linux-image-generic-64k (Ubuntu package) - update to 5.15.0.106.106
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-5.15.0-106-lowlatency-64k (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-5.15.0-106-generic (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-5.15.0-106-generic-64k (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-5.15.0-106-generic-lpae (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-5.15.0-106-lowlatency (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1044.43, 5.15.0.1044.51~20.04.1
linux-image-5.15.0-1044-gkeop (Ubuntu package) - update to 5.15.0-1044.51~20.04.1
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1054.52
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1054.54
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1054.54
linux-image-5.15.0-1054-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1054.55
linux-image-5.15.0-1054-nvidia (Ubuntu package) - update to 5.15.0-1054.55
linux-image-5.15.0-1054-raspi (Ubuntu package) - update to 5.15.0-1054.57
linux-image-5.15.0-1054-ibm (Ubuntu package) - update to 5.15.0-1054.57~20.04.1
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1057.57
linux-image-5.15.0-1057-intel-iotg (Ubuntu package) - update to 5.15.0-1057.63
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1058.57
linux-image-gke (Ubuntu package) - update to 5.15.0.1058.57
linux-image-5.15.0-1058-kvm (Ubuntu package) - update to 5.15.0-1058.63
linux-image-5.15.0-1058-gke (Ubuntu package) - update to 5.15.0-1058.63
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1059.55
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1059.55
linux-image-5.15.0-1059-oracle (Ubuntu package) - update to 5.15.0-1059.65~20.04.1
linux-image-5.15.0-1059-gcp (Ubuntu package) - update to 5.15.0-1059.67~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1061.61
linux-image-5.15.0-1061-aws (Ubuntu package) - update to 5.15.0-1061.67~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1063.61
linux-image-5.15.0-1063-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1063.72.1, 5.15.0-1063.72~20.04.1.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1063.72~20.04.1
linux-image-5.15.0-1063-azure (Ubuntu package) - update to 5.15.0-1063.72~20.04.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1063.72~20.04.1.41
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1063.72.41
linux-5.15.160/kernel-modules - update to 5.15.160
linux-5.15.160/kernel-huge - update to 5.15.160
linux-5.15.160/kernel-generic - update to 5.15.160
linux-5.15.160/kernel-headers - update to 5.15.160_smp
Dell Policy Manager for Secure Connect Gateway (SCG) - update to 5.24.00.14
Dell Secure Connect Gateway - update to 5.24.00.14
linux-image-6.1.0-1035-oem (Ubuntu package) - update to 6.1.0-1035.35
linux-image-oem-22.04c (Ubuntu package) - addressed in versions 6.1.0.1035.36, 6.5.0.1022.24
linux-image-oem-22.04 (Ubuntu package) - addressed in versions 6.1.0.1035.36, 6.5.0.1022.24
linux-image-oem-22.04a (Ubuntu package) - addressed in versions 6.1.0.1035.36, 6.5.0.1022.24
linux-image-oem-22.04b (Ubuntu package) - addressed in versions 6.1.0.1035.36, 6.5.0.1022.24
kernel-livepatch - addressed in versions 6.1.72-96.166-1.0-1, 6.1.75-99.163-1.0-1
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.5.0.41.41~22.04.2
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.5.0.41.41~22.04.2
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.41.41~22.04.2
linux-image-6.5.0-41-generic-64k (Ubuntu package) - update to 6.5.0-41.41~22.04.2
linux-image-6.5.0-41-generic (Ubuntu package) - update to 6.5.0-41.41~22.04.2
linux-image-6.5.0-1017-laptop (Ubuntu package) - update to 6.5.0-1017.20
linux-image-laptop-23.10 (Ubuntu package) - update to 6.5.0.1017.20
linux-image-6.5.0-1021-nvidia (Ubuntu package) - update to 6.5.0-1021.22
linux-image-6.5.0-1021-nvidia-64k (Ubuntu package) - update to 6.5.0-1021.22
linux-image-nvidia-6.5 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-nvidia-64k-6.5 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-nvidia-hwe-22.04 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-6.5.0-1022-oem (Ubuntu package) - update to 6.5.0-1022.23
linux-image-oem-22.04d (Ubuntu package) - update to 6.5.0.1022.24
kernel-headers - addressed in versions 6.7.3-100.fc38, 6.7.3-200.fc39
kernel - addressed in versions 6.7.3-100.fc38, 6.7.3-200.fc39
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

External References

Related Security Bulletins