In the Linux kernel, the following vulnerability has been resolved:
um: Fix potential integer overflow during physmem setup
This issue happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.
[
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"203137616643277906603342853825263301029",
"156984667908869201818453385207530628181",
"171859828462935676458103176824146926368",
"10648532365018244644001734739191817024",
"212470438008549304239597433439715370033",
"288759454746561592779049732726918687495",
"276565949358564271255036695478276131246",
"332266934615137512714230562815732953806",
"317326628696569762418255686519130702515",
"73027292322693325173846859359600844079"
],
"threshold": 0.9
},
"target": {
"file": "arch/um/kernel/physmem.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6102b72edc4eb8c0858df00ba74b5ce579c8fa2",
"signature_version": "v1",
"id": "CVE-2024-53145-17f1b8ec"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 926.0,
"function_hash": "318311894349199717745804882395835463033"
},
"target": {
"file": "arch/um/kernel/physmem.c",
"function": "setup_physmem"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd118c5f887802cef2d9ba0d1917258667f1cae",
"signature_version": "v1",
"id": "CVE-2024-53145-310027c7"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"203137616643277906603342853825263301029",
"156984667908869201818453385207530628181",
"171859828462935676458103176824146926368",
"10648532365018244644001734739191817024",
"212470438008549304239597433439715370033",
"288759454746561592779049732726918687495",
"276565949358564271255036695478276131246",
"332266934615137512714230562815732953806",
"317326628696569762418255686519130702515",
"73027292322693325173846859359600844079"
],
"threshold": 0.9
},
"target": {
"file": "arch/um/kernel/physmem.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c710f45811e7e2bfcf703980c306f19c7e1ecfe",
"signature_version": "v1",
"id": "CVE-2024-53145-364b610f"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"203137616643277906603342853825263301029",
"156984667908869201818453385207530628181",
"171859828462935676458103176824146926368",
"10648532365018244644001734739191817024",
"212470438008549304239597433439715370033",
"288759454746561592779049732726918687495",
"276565949358564271255036695478276131246",
"332266934615137512714230562815732953806",
"317326628696569762418255686519130702515",
"73027292322693325173846859359600844079"
],
"threshold": 0.9
},
"target": {
"file": "arch/um/kernel/physmem.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1a211e5210d31da8f49fc0021bf7129b726468c",
"signature_version": "v1",
"id": "CVE-2024-53145-56d13009"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 926.0,
"function_hash": "318311894349199717745804882395835463033"
},
"target": {
"file": "arch/um/kernel/physmem.c",
"function": "setup_physmem"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9c95f787b88b29165563fd97761032db77116e7",
"signature_version": "v1",
"id": "CVE-2024-53145-6df083eb"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"203137616643277906603342853825263301029",
"156984667908869201818453385207530628181",
"171859828462935676458103176824146926368",
"10648532365018244644001734739191817024",
"212470438008549304239597433439715370033",
"288759454746561592779049732726918687495",
"276565949358564271255036695478276131246",
"332266934615137512714230562815732953806",
"317326628696569762418255686519130702515",
"73027292322693325173846859359600844079"
],
"threshold": 0.9
},
"target": {
"file": "arch/um/kernel/physmem.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9c95f787b88b29165563fd97761032db77116e7",
"signature_version": "v1",
"id": "CVE-2024-53145-77a0c78a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 926.0,
"function_hash": "318311894349199717745804882395835463033"
},
"target": {
"file": "arch/um/kernel/physmem.c",
"function": "setup_physmem"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c710f45811e7e2bfcf703980c306f19c7e1ecfe",
"signature_version": "v1",
"id": "CVE-2024-53145-8a4bc727"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 926.0,
"function_hash": "318311894349199717745804882395835463033"
},
"target": {
"file": "arch/um/kernel/physmem.c",
"function": "setup_physmem"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6102b72edc4eb8c0858df00ba74b5ce579c8fa2",
"signature_version": "v1",
"id": "CVE-2024-53145-8d8f0e05"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"203137616643277906603342853825263301029",
"156984667908869201818453385207530628181",
"171859828462935676458103176824146926368",
"10648532365018244644001734739191817024",
"212470438008549304239597433439715370033",
"288759454746561592779049732726918687495",
"276565949358564271255036695478276131246",
"332266934615137512714230562815732953806",
"317326628696569762418255686519130702515",
"73027292322693325173846859359600844079"
],
"threshold": 0.9
},
"target": {
"file": "arch/um/kernel/physmem.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1bd118c5f887802cef2d9ba0d1917258667f1cae",
"signature_version": "v1",
"id": "CVE-2024-53145-ac1fadef"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 926.0,
"function_hash": "318311894349199717745804882395835463033"
},
"target": {
"file": "arch/um/kernel/physmem.c",
"function": "setup_physmem"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1a211e5210d31da8f49fc0021bf7129b726468c",
"signature_version": "v1",
"id": "CVE-2024-53145-cfc43974"
}
]