CVE-2024-42236
"Linux usb gadget configfs OOB Read/Write Vulnerability"
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`. There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short.
INFO
Published Date :
Aug. 7, 2024, 4:15 p.m.
Last Modified :
Aug. 8, 2024, 2:54 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-42236.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-42236 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-42236 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Aug. 08, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/2d16f63d8030903e5031853e79d731ee5d474e70 No Types Assigned https://git.kernel.org/stable/c/2d16f63d8030903e5031853e79d731ee5d474e70 Patch Changed Reference Type https://git.kernel.org/stable/c/6d3c721e686ea6c59e18289b400cc95c76e927e0 No Types Assigned https://git.kernel.org/stable/c/6d3c721e686ea6c59e18289b400cc95c76e927e0 Patch Changed Reference Type https://git.kernel.org/stable/c/72b8ee0d9826e8ed00e0bdfce3e46b98419b37ce No Types Assigned https://git.kernel.org/stable/c/72b8ee0d9826e8ed00e0bdfce3e46b98419b37ce Patch Changed Reference Type https://git.kernel.org/stable/c/a444c3fc264119801575ab086e03fb4952f23fd0 No Types Assigned https://git.kernel.org/stable/c/a444c3fc264119801575ab086e03fb4952f23fd0 Patch Changed Reference Type https://git.kernel.org/stable/c/c95fbdde87e39e5e0ae27f28bf6711edfb985caa No Types Assigned https://git.kernel.org/stable/c/c95fbdde87e39e5e0ae27f28bf6711edfb985caa Patch Changed Reference Type https://git.kernel.org/stable/c/d1205033e912f9332c1dbefa812e6ceb0575ce0a No Types Assigned https://git.kernel.org/stable/c/d1205033e912f9332c1dbefa812e6ceb0575ce0a Patch Changed Reference Type https://git.kernel.org/stable/c/e8474a10c535e6a2024c3b06e37e4a3a23beb490 No Types Assigned https://git.kernel.org/stable/c/e8474a10c535e6a2024c3b06e37e4a3a23beb490 Patch Changed Reference Type https://git.kernel.org/stable/c/eecfefad0953b2f31aaefa058f7f348ff39c4bba No Types Assigned https://git.kernel.org/stable/c/eecfefad0953b2f31aaefa058f7f348ff39c4bba Patch Added CWE NIST CWE-787 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.318 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.280 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.222 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.163 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.100 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.41 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.9.10 -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 07, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Userspace provided string 's' could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == '\n') followed closely by an OOB write in the form `str[0 - 1] = '\0'`. There is already a validating check to catch strings that are too long. Let's supply an additional check for invalid strings that are too short. Added Reference kernel.org https://git.kernel.org/stable/c/a444c3fc264119801575ab086e03fb4952f23fd0 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c95fbdde87e39e5e0ae27f28bf6711edfb985caa [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/e8474a10c535e6a2024c3b06e37e4a3a23beb490 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/72b8ee0d9826e8ed00e0bdfce3e46b98419b37ce [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/2d16f63d8030903e5031853e79d731ee5d474e70 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/d1205033e912f9332c1dbefa812e6ceb0575ce0a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/eecfefad0953b2f31aaefa058f7f348ff39c4bba [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/6d3c721e686ea6c59e18289b400cc95c76e927e0 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-42236 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-42236
weaknesses.