In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix loop termination condition in gssfreeintokenpages()
The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat:
KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f]
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a1cb0c6102bb4fd310243588d39461da49497ad",
"deprecated": false,
"id": "CVE-2024-36288-14602ea2",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"311139741778795616083194782083604215121",
"130858738463338361933590471468452848627",
"126239674380037317961688590174587409373",
"194088751693116406490462385400802046314"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af628d43a822b78ad8d4a58d8259f8bf8bc71115",
"deprecated": false,
"id": "CVE-2024-36288-52b84d7d",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"311139741778795616083194782083604215121",
"130858738463338361933590471468452848627",
"126239674380037317961688590174587409373",
"194088751693116406490462385400802046314"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af628d43a822b78ad8d4a58d8259f8bf8bc71115",
"deprecated": false,
"id": "CVE-2024-36288-539a8397",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1432.0,
"function_hash": "229155821256406773821255188832025926410"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57ff6c0a175930856213b2aa39f8c845a53e5b1c",
"deprecated": false,
"id": "CVE-2024-36288-6e53637c",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1456.0,
"function_hash": "39802185571439213896949102975527657528"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4cefcd0af7458bdeff56a9d8dfc6868ce23d128a",
"deprecated": false,
"id": "CVE-2024-36288-70ea07ad",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1456.0,
"function_hash": "39802185571439213896949102975527657528"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4cefcd0af7458bdeff56a9d8dfc6868ce23d128a",
"deprecated": false,
"id": "CVE-2024-36288-8cf80b96",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"8817058910376433909574342542057220677",
"139453982263812218296901084793369074809",
"103185807451978818567566892051793738891",
"78221428928200349196915001499197313134"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4878ea99f2b40ef1925720b1b4ca7f4af1ba785",
"deprecated": false,
"id": "CVE-2024-36288-9533b57f",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1458.0,
"function_hash": "296543390380686145186489946394386333166"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ed45d20d30005bed94c8c527ce51d5ad8121018",
"deprecated": false,
"id": "CVE-2024-36288-ae4459a3",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1456.0,
"function_hash": "39802185571439213896949102975527657528"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57ff6c0a175930856213b2aa39f8c845a53e5b1c",
"deprecated": false,
"id": "CVE-2024-36288-b8d1da2f",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"8817058910376433909574342542057220677",
"139453982263812218296901084793369074809",
"103185807451978818567566892051793738891",
"78221428928200349196915001499197313134"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a77c3dead97339478c7422eb07bf4bf63577008",
"deprecated": false,
"id": "CVE-2024-36288-befc741b",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"311139741778795616083194782083604215121",
"130858738463338361933590471468452848627",
"126239674380037317961688590174587409373",
"194088751693116406490462385400802046314"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a1cb0c6102bb4fd310243588d39461da49497ad",
"deprecated": false,
"id": "CVE-2024-36288-d2776dcf",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1432.0,
"function_hash": "229155821256406773821255188832025926410"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a77c3dead97339478c7422eb07bf4bf63577008",
"deprecated": false,
"id": "CVE-2024-36288-d73b1af1",
"target": {
"function": "gss_read_proxy_verf",
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"length": 1432.0,
"function_hash": "229155821256406773821255188832025926410"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ed45d20d30005bed94c8c527ce51d5ad8121018",
"deprecated": false,
"id": "CVE-2024-36288-f65e6f18",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"8817058910376433909574342542057220677",
"139453982263812218296901084793369074809",
"103185807451978818567566892051793738891",
"78221428928200349196915001499197313134"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4878ea99f2b40ef1925720b1b4ca7f4af1ba785",
"deprecated": false,
"id": "CVE-2024-36288-fefae275",
"target": {
"file": "net/sunrpc/auth_gss/svcauth_gss.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"8817058910376433909574342542057220677",
"139453982263812218296901084793369074809",
"103185807451978818567566892051793738891",
"78221428928200349196915001499197313134"
]
},
"signature_type": "Line"
}
]