2024-05-01 14:03:31 +00:00
{
"id" : "CVE-2024-27025" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2024-05-01T13:15:48.890" ,
2024-12-23 21:03:43 +00:00
"lastModified" : "2024-12-23T19:24:12.370" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-05-01 14:03:31 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nnbd: null check for nla_nest_start\n\nnla_nest_start() may fail and return NULL. Insert a check and set errno\nbased on other call sites within the same source code."
2024-05-05 02:03:23 +00:00
} ,
{
"lang" : "es" ,
"value" : "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nbd: la comprobaci\u00f3n nula de nla_nest_start nla_nest_start() puede fallar y devolver NULL. Inserte una marca y establezca errno seg\u00fan otros sitios de llamadas dentro del mismo c\u00f3digo fuente."
2024-05-01 14:03:31 +00:00
}
] ,
2024-12-23 21:03:43 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" ,
"baseScore" : 5.5 ,
"baseSeverity" : "MEDIUM" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-476"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.12" ,
"versionEndExcluding" : "5.4.273" ,
"matchCriteriaId" : "00E98D9C-03F8-4C45-9EEE-3B97578B477E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.5" ,
"versionEndExcluding" : "5.10.214" ,
"matchCriteriaId" : "65987874-467B-4D3B-91D6-68A129B34FB8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.11" ,
"versionEndExcluding" : "5.15.153" ,
"matchCriteriaId" : "ACB69438-845D-4E3C-B114-3140611F9C0B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.16" ,
"versionEndExcluding" : "6.1.83" ,
"matchCriteriaId" : "121A07F6-F505-4C47-86BF-9BB6CC7B6C19"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.2" ,
"versionEndExcluding" : "6.6.23" ,
"matchCriteriaId" : "E00814DC-0BA7-431A-9926-80FEB4A96C68"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.7" ,
"versionEndExcluding" : "6.7.11" ,
"matchCriteriaId" : "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.8" ,
"versionEndExcluding" : "6.8.2" ,
"matchCriteriaId" : "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
}
]
}
]
}
] ,
2024-05-01 14:03:31 +00:00
"references" : [
{
"url" : "https://git.kernel.org/stable/c/31edf4bbe0ba27fd03ac7d87eb2ee3d2a231af6d" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/44214d744be32a4769faebba764510888f1eb19e" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/4af837db0fd3679fabc7b7758397090b0c06dced" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/96436365e5d80d0106ea785a4f80a58e7c9edff8" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/98e60b538e66c90b9a856828c71d4e975ebfa797" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/b7f5aed55829f376e4f7e5ea5b80ccdcb023e983" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/ba6a9970ce9e284cbc04099361c58731e308596a" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-05-01 14:03:31 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/e803040b368d046434fbc8a91945c690332c4fcf" ,
2024-12-23 21:03:43 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/31edf4bbe0ba27fd03ac7d87eb2ee3d2a231af6d" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/44214d744be32a4769faebba764510888f1eb19e" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/4af837db0fd3679fabc7b7758397090b0c06dced" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/96436365e5d80d0106ea785a4f80a58e7c9edff8" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/98e60b538e66c90b9a856828c71d4e975ebfa797" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/b7f5aed55829f376e4f7e5ea5b80ccdcb023e983" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/ba6a9970ce9e284cbc04099361c58731e308596a" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/e803040b368d046434fbc8a91945c690332c4fcf" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" ,
2024-12-23 21:03:43 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
2024-05-01 14:03:31 +00:00
}
]
}