Description

In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.

INFO

Published Date :

2024-08-17T09:09:01.586Z

Last Modified :

2025-11-03T22:03:51.105Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-42292 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Eus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-42292.

URL Resource
https://git.kernel.org/stable/c/57fe01d3d04276875c7e3a6dc763517fc05b8762 cve-icon cve-icon
https://git.kernel.org/stable/c/648d5490460d38436640da0812bf7f6351c150d2 cve-icon cve-icon
https://git.kernel.org/stable/c/68d63ace80b76395e7935687ecdb86421adc2168 cve-icon cve-icon
https://git.kernel.org/stable/c/81a15d28f32af01493ae8c5457e0d55314a4167d cve-icon cve-icon
https://git.kernel.org/stable/c/b59a5e86a3934f1b6a5bd1368902dbc79bdecc90 cve-icon cve-icon
https://git.kernel.org/stable/c/c5ee8adc8d98a49703320d13878ba2b923b142f5 cve-icon cve-icon
https://git.kernel.org/stable/c/d4663536754defff75ff1eca0aaebc41da165a8d cve-icon cve-icon
https://git.kernel.org/stable/c/dd6e9894b451e7c85cceb8e9dc5432679a70e7dc cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024081746-CVE-2024-42292-5387@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-42292 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-42292 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact