Wind River Support Network

HomeDefectsLIN1021-7055
Fixed

LIN1021-7055 : Security Advisory - linux - CVE-2024-0582

Created: Jan 16, 2024    Updated: Nov 25, 2024
Resolved Date: Nov 25, 2024
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CREATE(Triage):(User=admin) CVE-2024-0582 (https://nvd.nist.gov/vuln/detail/CVE-2024-0582)
Live chat
Online