CVE-2024-46743

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When of_irq_parse_raw() is invoked with a device address smaller than the interrupt parent node (from #address-cells property), KASAN detects the following out-of-bounds read when populating the initial match table (dyndbg="func of_irq_parse_* +p"): OF: of_irq_parse_one: dev=/soc@0/picasso/watchdog, index=0 OF: parent=/soc@0/pci@878000000000/gpio0@17,0, intsize=2 OF: intspec=4 OF: of_irq_parse_raw: ipar=/soc@0/pci@878000000000/gpio0@17,0, size=2 OF: ->...

Affected product and versions

Product

Linux Linux, RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

Affected versions

>= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < d2a79494d8a5262949736fb2c3ac44d20a51b0d8, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < defcaa426ba0bc89ffdafb799d2e50b52f74ffc4, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < 9d1e9f0876b03d74d44513a0ed3ed15ef8f2fed5, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < baaf26723beab3a04da578d3008be3544f83758f, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < 8ff351ea12e918db1373b915c4c268815929cbe5, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < 7ead730af11ee7da107f16fc77995613c58d292d, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < bf68acd840b6a5bfd3777e0d5aaa204db6b461a9, >= cc9fd71c62f542233c412b5fabc1bbe0c4d5ad08 < b739dffa5d570b411d4bdf4bb9b8dfd6b7d72305, >= 2.6.18, < V3.2, >= V3.1.0 < V3.1.5, < 4.19.322, >= 4.20 < 5.4.284, >= 5.5 < 5.10.226, >= 5.11 < 5.15.167, >= 5.16 < 6.1.110, >= 6.2 < 6.6.51, >= 6.7 < 6.10.10, 6.11

Fixed versions

4.19.322, 5.4.284, 5.10.226, 5.15.167, 6.1.110, 6.6.51, 6.10.10

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-125