In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in ima_eventdigest_init_common Function ima_eventdigest_init() calls ima_eventdigest_init_common() with HASH_ALGO__LAST which is then used to access the array hash_digest_size[] leading to buffer overrun. Have a conditional statement to handle this.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/1ecf0df5205cfb0907eb7984b8671257965a5232 cve-icon cve-icon
https://git.kernel.org/stable/c/8a84765c62cc0469864e2faee43aae253ad16082 cve-icon cve-icon
https://git.kernel.org/stable/c/923168a0631bc42fffd55087b337b1b6c54dcff5 cve-icon cve-icon
https://git.kernel.org/stable/c/e01aae58e818503f2ffcd34c6f7dc6f90af1057e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024120246-CVE-2024-53106-8432@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-53106 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-53106 cve-icon
History

Thu, 13 Feb 2025 00:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Tue, 03 Dec 2024 01:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 02 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ima: fix buffer overrun in ima_eventdigest_init_common Function ima_eventdigest_init() calls ima_eventdigest_init_common() with HASH_ALGO__LAST which is then used to access the array hash_digest_size[] leading to buffer overrun. Have a conditional statement to handle this.
Title ima: fix buffer overrun in ima_eventdigest_init_common
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2024-12-19T09:39:20.919Z

Reserved: 2024-11-19T17:17:24.992Z

Link: CVE-2024-53106

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2024-12-02T14:15:11.420

Modified: 2024-12-02T14:15:11.420

Link: CVE-2024-53106

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-12-02T00:00:00Z

Links: CVE-2024-53106 - Bugzilla