Out-of-bounds read in Linux kernel - CVE-2024-26588

Vulnerability identifier: #VU90363

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-26588

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to an out-of-bounds read error within the build_insn() function in arch/loongarch/net/bpf_jit.c. A local user can execute arbitrary code.

Linux kernel
Ubuntu
linux-image-6.1.0-1035-oem (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)

Install update from vendor's website.

Linux kernel - addressed in versions 6.1.75, 6.6.14, 6.7.2, 6.8
linux-image-6.1.0-1035-oem (Ubuntu package) - update to 6.1.0-1035.35
linux-image-oem-22.04 (Ubuntu package) - update to 6.1.0.1035.36
linux-image-oem-22.04a (Ubuntu package) - update to 6.1.0.1035.36
linux-image-oem-22.04b (Ubuntu package) - update to 6.1.0.1035.36
linux-image-oem-22.04c (Ubuntu package) - update to 6.1.0.1035.36

• https://git.kernel.org/stable/c/4631c2dd69d928bca396f9f58baeddf85e14ced5
• https://git.kernel.org/stable/c/9aeb09f4d85a87bac46c010d75a2ea299d462f28
• https://git.kernel.org/stable/c/7924ade13a49c0067da6ea13e398102979c0654a
• https://git.kernel.org/stable/c/36a87385e31c9343af9a4756598e704741250a67
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.75
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.14
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.2
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8

• Out-of-bounds read in Linux kernel loongarch net
• Ubuntu update for linux-oem-6.1