Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CHK NVD : CVE-2024-42160 - 0f6d34a5 #5267

Open
witchcraze opened this issue Dec 11, 2024 · 0 comments
Open

CHK NVD : CVE-2024-42160 - 0f6d34a5 #5267

witchcraze opened this issue Dec 11, 2024 · 0 comments
Assignees
Labels

Comments

@witchcraze
Copy link
Owner

[CVE Configuration Update Request] Update Suggestion - CVE-2024-42160 - Cvss3 : 7.8

https://www.linuxkernelcves.com/cves/CVE-2024-42160
https://gitlab.com/cip-project/cip-kernel/cip-kernel-sec/-/blob/master/issues/CVE-2024-42160.yml
https://github.com/witchcraze/NVD_CHECK/blob/main/kernel/CVE-2024-42160.json

- CVE-2024-42160
- Suggested Configuration
  - OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.1.0 up to (excluding) 6.1.98
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.10.0 up to (excluding) 6.10
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6.0 up to (excluding) 6.6.39
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.9.0 up to (excluding) 6.9.9
- Reference
  - https://www.kernel.org/pub//linux/kernel/v6.x/ChangeLog-6.1.98
  - https://www.kernel.org/pub//linux/kernel/v6.x/ChangeLog-6.10
  - https://www.kernel.org/pub//linux/kernel/v6.x/ChangeLog-6.6.39
  - https://www.kernel.org/pub//linux/kernel/v6.x/ChangeLog-6.9.9
- Reference (Commit)
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr()
    - Fixed by
      - 6.1.98 (bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d)
      - 6.10 (4ed886b187f47447ad559619c48c086f432d2b77) (upstream)
      - 6.6.39 (44958ca9e400f57bd0478115519ffc350fcee61e)
      - 6.9.9 (ecb641f424d6d1f055d149a15b892edcc92c504b)
    - Will be introduced by
      - https://github.com/torvalds/linux/commit/087968974fcd
- I Checked
  - XXXXXXXXXXXXXXXXXXXXXXXXXXXX is written as upstream commit in each ChangeLog
  - From XXXXXXXX commit page, XXXXXXXXXXX is the most oldest in commit-branches area
  - For 3.16.35, there is related post at lkml
  - For 3.16 series, 3.16.35 is the next release from 3.16.7 which was released at 2014
  - https://mirrors.edge.kernel.org/pub/linux/kernel/v3.x/
  - XXXX

https://nvd.nist.gov/vuln/detail/CVE-2024-42160

URI Start(Ex) Start(Inc) End(Ex) End(Inc)
cpe:/o:linux:linux_kernel 6.1.98
cpe:/o:linux:linux_kernel 6.2 6.6.39
cpe:/o:linux:linux_kernel 6.7 6.9.9
@witchcraze witchcraze self-assigned this Dec 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant