In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'ppp_async_encode()' assumes valid LCP packets (with code from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that LCP packet has an actual body beyond PPP_LCP header bytes, and reject claimed-as-LCP but actually malformed data otherwise.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux
  • Rhel Eus

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:7001 2024-09-24T00:00:00Z
kernel-0:4.18.0-553.22.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:7000 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 8.8 Extended Update Support
kernel-0:4.18.0-477.74.1.el8_8 cpe:/o:redhat:rhel_eus:8.8 RHSA-2024:6993 2024-09-24T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-427.35.1.el9_4 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:6567 2024-09-11T00:00:00Z
kernel-0:5.14.0-427.35.1.el9_4 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:6567 2024-09-11T00:00:00Z
Red Hat Enterprise Linux 9.2 Extended Update Support
kernel-0:5.14.0-284.82.1.el9_2 cpe:/a:redhat:rhel_eus:9.2 RHSA-2024:6267 2024-09-04T00:00:00Z
kernel-rt-0:5.14.0-284.82.1.rt14.367.el9_2 cpe:/a:redhat:rhel_eus:9.2::nfv RHSA-2024:6268 2024-09-04T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/099502ca410922b56353ccef2749bc0de669da78 cve-icon cve-icon
https://git.kernel.org/stable/c/3134bdf7356ed952dcecb480861d2afcc1e40492 cve-icon cve-icon
https://git.kernel.org/stable/c/3ba12c2afd933fc1bf800f6d3f6c7ec8f602ce56 cve-icon cve-icon
https://git.kernel.org/stable/c/6e8f1c21174f9482033bbb59f13ce1a8cbe843c3 cve-icon cve-icon
https://git.kernel.org/stable/c/97d1efd8be26615ff680cdde86937d5943138f37 cve-icon cve-icon
https://git.kernel.org/stable/c/d683e7f3fc48f59576af34631b4fb07fd931343e cve-icon cve-icon
https://git.kernel.org/stable/c/ebc5c630457783d17d0c438b0ad70b232a64a82f cve-icon cve-icon
https://git.kernel.org/stable/c/f2aeb7306a898e1cbd03963d376f4b6656ca2b55 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024072925-CVE-2024-41044-5b26@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-41044 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-41044 cve-icon
History

Wed, 06 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 24 Sep 2024 11:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:rhel_eus:8.8

Tue, 24 Sep 2024 06:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8::nfv

Wed, 11 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat enterprise Linux

Fri, 06 Sep 2024 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat rhel Eus
Weaknesses CWE-20
CPEs cpe:/a:redhat:rhel_eus:9.2
cpe:/a:redhat:rhel_eus:9.2::nfv
Vendors & Products Redhat
Redhat rhel Eus
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T14:32:02.126Z

Updated: 2024-11-05T09:35:34.734Z

Reserved: 2024-07-12T12:17:45.624Z

Link: CVE-2024-41044

cve-icon Vulnrichment

Updated: 2024-08-02T04:46:51.636Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-29T15:15:12.783

Modified: 2024-11-21T09:32:07.723

Link: CVE-2024-41044

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-41044 - Bugzilla