In the Linux kernel, the following vulnerability has been resolved: ALSA: emux: improve patch ioctl data validation In load_data(), make the validation of and skipping over the main info block match that in load_guspatch(). In load_guspatch(), add checking that the specified patch length matches the actually supplied data, like load_data() already did.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/40d7def67841343c10f8642a41031fecbb248bab cve-icon cve-icon
https://git.kernel.org/stable/c/79d9a000f0220cdaba1682d2a23c0d0c61d620a3 cve-icon cve-icon
https://git.kernel.org/stable/c/7a18293fd8d8519c2f7a03753bc1583b18e3db69 cve-icon cve-icon
https://git.kernel.org/stable/c/87039b83fb7bfd7d0e0499aaa8e6c049906b4d14 cve-icon cve-icon
https://git.kernel.org/stable/c/89b32ccb12ae67e630c6453d778ec30a592a212f cve-icon cve-icon
https://git.kernel.org/stable/c/d0ff2443fcbb472206d45a5d2a90cc694065804e cve-icon cve-icon
https://git.kernel.org/stable/c/d23982ea9aa438f35a8c8a6305943e98a8db90f6 cve-icon cve-icon
https://git.kernel.org/stable/c/d8f5ce3cb9adf0c72e2ad6089aba02d7a32469c2 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024072911-CVE-2024-42097-5a6a@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-42097 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-42097 cve-icon
History

Thu, 26 Sep 2024 15:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

 cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Aug 2024 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T17:39:32.470Z

Updated: 2024-11-05T09:37:20.830Z

Reserved: 2024-07-29T15:50:41.173Z

Link: CVE-2024-42097

cve-icon Vulnrichment

Updated: 2024-08-02T04:54:32.545Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-29T18:15:12.167

Modified: 2024-07-30T13:33:30.653

Link: CVE-2024-42097

cve-icon Redhat

Severity : Low

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-42097 - Bugzilla