Bug 2297578 (CVE-2024-40994) - CVE-2024-40994 kernel: ptp: fix integer overflow in max_vclocks_store
Summary: CVE-2024-40994 kernel: ptp: fix integer overflow in max_vclocks_store
Keywords:
Status: NEW
Alias: CVE-2024-40994
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-12 13:48 UTC by OSIDB Bzimport
Modified: 2024-09-27 13:08 UTC (History)
4 users (show)

Fixed In Version: kernel 5.15.162, kernel 6.1.96, kernel 6.6.36, kernel 6.9.7, kernel 6.10-rc5
Doc Type: If docs needed, set a value
Doc Text:
A vulnerability was found in the Linux kernel's ptp subsystem in ptp_sysfs.c file, where the max_vclocks_store function can cause an integer overflow on 32-bit systems. This issue occurs during a multiplication operation, potentially leading to incorrect memory allocation, resulting in memory corruption.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-07-12 13:48:26 UTC 
In the Linux kernel, the following vulnerability has been resolved:

ptp: fix integer overflow in max_vclocks_store

On 32bit systems, the "4 * max" multiply can overflow.  Use kcalloc()
to do the allocation to prevent this.
Note You need to log in before you can comment on or make changes to this bug.