Vulnerability-Lookup

CVE-2024-37356 (GCVE-0-2024-37356)

Vulnerability from cvelistv5 – Published: 2024-06-21 10:18 – Updated: 2026-05-12 11:54

Title

tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

Summary

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). In dctcp_update_alpha(), we use a module parameter dctcp_shift_g as follows: alpha -= min_not_zero(alpha, alpha >> dctcp_shift_g); ... delivered_ce <<= (10 - dctcp_shift_g); It seems syzkaller started fuzzing module parameters and triggered shift-out-of-bounds [0] by setting 100 to dctcp_shift_g: memcpy((void*)0x20000080, "/sys/module/tcp_dctcp/parameters/dctcp_shift_g\000", 47); res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000080ul, /*flags=*/2ul, /*mode=*/0ul); memcpy((void*)0x20000000, "100\000", 4); syscall(__NR_write, /*fd=*/r[0], /*val=*/0x20000000ul, /*len=*/4ul); Let's limit the max value of dctcp_shift_g by param_set_uint_minmax(). With this patch: # echo 10 > /sys/module/tcp_dctcp/parameters/dctcp_shift_g # cat /sys/module/tcp_dctcp/parameters/dctcp_shift_g 10 # echo 11 > /sys/module/tcp_dctcp/parameters/dctcp_shift_g -bash: echo: write error: Invalid argument [0]: UBSAN: shift-out-of-bounds in net/ipv4/tcp_dctcp.c:143:12 shift exponent 100 is too large for 32-bit type 'u32' (aka 'unsigned int') CPU: 0 PID: 8083 Comm: syz-executor345 Not tainted 6.9.0-05151-g1b294a1f3561 #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:114 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_shift_out_of_bounds+0x346/0x3a0 lib/ubsan.c:468 dctcp_update_alpha+0x540/0x570 net/ipv4/tcp_dctcp.c:143 tcp_in_ack_event net/ipv4/tcp_input.c:3802 [inline] tcp_ack+0x17b1/0x3bc0 net/ipv4/tcp_input.c:3948 tcp_rcv_state_process+0x57a/0x2290 net/ipv4/tcp_input.c:6711 tcp_v4_do_rcv+0x764/0xc40 net/ipv4/tcp_ipv4.c:1937 sk_backlog_rcv include/net/sock.h:1106 [inline] __release_sock+0x20f/0x350 net/core/sock.c:2983 release_sock+0x61/0x1f0 net/core/sock.c:3549 mptcp_subflow_shutdown+0x3d0/0x620 net/mptcp/protocol.c:2907 mptcp_check_send_data_fin+0x225/0x410 net/mptcp/protocol.c:2976 __mptcp_close+0x238/0xad0 net/mptcp/protocol.c:3072 mptcp_close+0x2a/0x1a0 net/mptcp/protocol.c:3127 inet_release+0x190/0x1f0 net/ipv4/af_inet.c:437 __sock_release net/socket.c:659 [inline] sock_close+0xc0/0x240 net/socket.c:1421 __fput+0x41b/0x890 fs/file_table.c:422 task_work_run+0x23b/0x300 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0x9c8/0x2540 kernel/exit.c:878 do_group_exit+0x201/0x2b0 kernel/exit.c:1027 __do_sys_exit_group kernel/exit.c:1038 [inline] __se_sys_exit_group kernel/exit.c:1036 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xe4/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x7f6c2b5005b6 Code: Unable to access opcode bytes at 0x7f6c2b50058c. RSP: 002b:00007ffe883eb948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007f6c2b5862f0 RCX: 00007f6c2b5005b6 RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 RBP: 0000000000000001 R08: 00000000000000e7 R09: ffffffffffffffc0 R10: 0000000000000006 R11: 0000000000000246 R12: 00007f6c2b5862f0 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 </TASK>

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

Assigner

Linux

References

12 references

URL	Tags
https://git.kernel.org/stable/c/06d0fe049b51b0a92…
https://git.kernel.org/stable/c/6aacaa80d962f4916…
https://git.kernel.org/stable/c/e9b2f60636d18dfd0…
https://git.kernel.org/stable/c/8602150286a2a860a…
https://git.kernel.org/stable/c/e65d13ec00a738fa7…
https://git.kernel.org/stable/c/02261d3f9dc7d1d7b…
https://git.kernel.org/stable/c/237340dee373b9783…
https://git.kernel.org/stable/c/3ebc46ca8675de637…
https://lists.debian.org/debian-lts-announce/2024…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

9 products

Vendor	Product	Version
Linux	Linux	Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < 06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6 (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < 6aacaa80d962f4916ccf90e2080306cec6c90fcf (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31 (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < 8602150286a2a860a1dc55cbd04f99316f19b40a (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < e65d13ec00a738fa7661925fd5929ab3c765d4be (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < 02261d3f9dc7d1d7be7d778f839e3404ab99034c (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < 237340dee373b97833a491d2e99fcf1d4a9adafd (git) Affected: e3118e8359bb7c59555aca60c725106e6d78c5ce , < 3ebc46ca8675de6378e3f8f40768e180bb8afa66 (git)
Linux	Linux	Affected: 3.18 Unaffected: 0 , < 3.18 (semver) Unaffected: 4.19.316 , ≤ 4.19.* (semver) Unaffected: 5.4.278 , ≤ 5.4.* (semver) Unaffected: 5.10.219 , ≤ 5.10.* (semver) Unaffected: 5.15.161 , ≤ 5.15.* (semver) Unaffected: 6.1.93 , ≤ 6.1.* (semver) Unaffected: 6.6.33 , ≤ 6.6.* (semver) Unaffected: 6.9.4 , ≤ 6.9.* (semver) Unaffected: 6.10 , ≤ * (original_commit_for_fix)
Siemens	RUGGEDCOM RST2428P	Affected: 0 , < V3.1 (custom)
Siemens	SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family	Unaffected: 0 , < * (custom)
Siemens	SCALANCE XCM-/XRM-/XCH-/XRH-300 family	Affected: 0 , < V3.1 (custom)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.0 , < V3.1.5 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-37356",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-21T13:56:45.436880Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-21T13:57:55.391Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T17:21:20.246Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6aacaa80d962f4916ccf90e2080306cec6c90fcf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8602150286a2a860a1dc55cbd04f99316f19b40a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e65d13ec00a738fa7661925fd5929ab3c765d4be"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/02261d3f9dc7d1d7be7d778f839e3404ab99034c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/237340dee373b97833a491d2e99fcf1d4a9adafd"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3ebc46ca8675de6378e3f8f40768e180bb8afa66"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2428P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM-/XRM-/XCH-/XRH-300 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.1.5",
                "status": "affected",
                "version": "V3.1.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:54:30.036Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-613116.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/tcp_dctcp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "6aacaa80d962f4916ccf90e2080306cec6c90fcf",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "8602150286a2a860a1dc55cbd04f99316f19b40a",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "e65d13ec00a738fa7661925fd5929ab3c765d4be",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "02261d3f9dc7d1d7be7d778f839e3404ab99034c",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "237340dee373b97833a491d2e99fcf1d4a9adafd",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            },
            {
              "lessThan": "3ebc46ca8675de6378e3f8f40768e180bb8afa66",
              "status": "affected",
              "version": "e3118e8359bb7c59555aca60c725106e6d78c5ce",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/tcp_dctcp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.18"
            },
            {
              "lessThan": "3.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.316",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.278",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.219",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.161",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.33",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.316",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.278",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.219",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.161",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.93",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.33",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.4",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix shift-out-of-bounds in dctcp_update_alpha().\n\nIn dctcp_update_alpha(), we use a module parameter dctcp_shift_g\nas follows:\n\n  alpha -= min_not_zero(alpha, alpha \u003e\u003e dctcp_shift_g);\n  ...\n  delivered_ce \u003c\u003c= (10 - dctcp_shift_g);\n\nIt seems syzkaller started fuzzing module parameters and triggered\nshift-out-of-bounds [0] by setting 100 to dctcp_shift_g:\n\n  memcpy((void*)0x20000080,\n         \"/sys/module/tcp_dctcp/parameters/dctcp_shift_g\\000\", 47);\n  res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000080ul,\n                /*flags=*/2ul, /*mode=*/0ul);\n  memcpy((void*)0x20000000, \"100\\000\", 4);\n  syscall(__NR_write, /*fd=*/r[0], /*val=*/0x20000000ul, /*len=*/4ul);\n\nLet\u0027s limit the max value of dctcp_shift_g by param_set_uint_minmax().\n\nWith this patch:\n\n  # echo 10 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\n  # cat /sys/module/tcp_dctcp/parameters/dctcp_shift_g\n  10\n  # echo 11 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\n  -bash: echo: write error: Invalid argument\n\n[0]:\nUBSAN: shift-out-of-bounds in net/ipv4/tcp_dctcp.c:143:12\nshift exponent 100 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 0 PID: 8083 Comm: syz-executor345 Not tainted 6.9.0-05151-g1b294a1f3561 #2\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.13.0-1ubuntu1.1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x201/0x300 lib/dump_stack.c:114\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x346/0x3a0 lib/ubsan.c:468\n dctcp_update_alpha+0x540/0x570 net/ipv4/tcp_dctcp.c:143\n tcp_in_ack_event net/ipv4/tcp_input.c:3802 [inline]\n tcp_ack+0x17b1/0x3bc0 net/ipv4/tcp_input.c:3948\n tcp_rcv_state_process+0x57a/0x2290 net/ipv4/tcp_input.c:6711\n tcp_v4_do_rcv+0x764/0xc40 net/ipv4/tcp_ipv4.c:1937\n sk_backlog_rcv include/net/sock.h:1106 [inline]\n __release_sock+0x20f/0x350 net/core/sock.c:2983\n release_sock+0x61/0x1f0 net/core/sock.c:3549\n mptcp_subflow_shutdown+0x3d0/0x620 net/mptcp/protocol.c:2907\n mptcp_check_send_data_fin+0x225/0x410 net/mptcp/protocol.c:2976\n __mptcp_close+0x238/0xad0 net/mptcp/protocol.c:3072\n mptcp_close+0x2a/0x1a0 net/mptcp/protocol.c:3127\n inet_release+0x190/0x1f0 net/ipv4/af_inet.c:437\n __sock_release net/socket.c:659 [inline]\n sock_close+0xc0/0x240 net/socket.c:1421\n __fput+0x41b/0x890 fs/file_table.c:422\n task_work_run+0x23b/0x300 kernel/task_work.c:180\n exit_task_work include/linux/task_work.h:38 [inline]\n do_exit+0x9c8/0x2540 kernel/exit.c:878\n do_group_exit+0x201/0x2b0 kernel/exit.c:1027\n __do_sys_exit_group kernel/exit.c:1038 [inline]\n __se_sys_exit_group kernel/exit.c:1036 [inline]\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xe4/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\nRIP: 0033:0x7f6c2b5005b6\nCode: Unable to access opcode bytes at 0x7f6c2b50058c.\nRSP: 002b:00007ffe883eb948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\nRAX: ffffffffffffffda RBX: 00007f6c2b5862f0 RCX: 00007f6c2b5005b6\nRDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001\nRBP: 0000000000000001 R08: 00000000000000e7 R09: ffffffffffffffc0\nR10: 0000000000000006 R11: 0000000000000246 R12: 00007f6c2b5862f0\nR13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\n \u003c/TASK\u003e"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:18:28.367Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/6aacaa80d962f4916ccf90e2080306cec6c90fcf"
        },
        {
          "url": "https://git.kernel.org/stable/c/e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31"
        },
        {
          "url": "https://git.kernel.org/stable/c/8602150286a2a860a1dc55cbd04f99316f19b40a"
        },
        {
          "url": "https://git.kernel.org/stable/c/e65d13ec00a738fa7661925fd5929ab3c765d4be"
        },
        {
          "url": "https://git.kernel.org/stable/c/02261d3f9dc7d1d7be7d778f839e3404ab99034c"
        },
        {
          "url": "https://git.kernel.org/stable/c/237340dee373b97833a491d2e99fcf1d4a9adafd"
        },
        {
          "url": "https://git.kernel.org/stable/c/3ebc46ca8675de6378e3f8f40768e180bb8afa66"
        }
      ],
      "title": "tcp: Fix shift-out-of-bounds in dctcp_update_alpha().",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-37356",
    "datePublished": "2024-06-21T10:18:11.642Z",
    "dateReserved": "2024-06-21T10:13:16.306Z",
    "dateUpdated": "2026-05-12T11:54:30.036Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-37356",
      "date": "2026-06-07",
      "epss": "0.00019",
      "percentile": "0.05219"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-37356\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-06-21T11:15:10.677\",\"lastModified\":\"2026-05-12T12:16:51.453\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ntcp: Fix shift-out-of-bounds in dctcp_update_alpha().\\n\\nIn dctcp_update_alpha(), we use a module parameter dctcp_shift_g\\nas follows:\\n\\n  alpha -= min_not_zero(alpha, alpha \u003e\u003e dctcp_shift_g);\\n  ...\\n  delivered_ce \u003c\u003c= (10 - dctcp_shift_g);\\n\\nIt seems syzkaller started fuzzing module parameters and triggered\\nshift-out-of-bounds [0] by setting 100 to dctcp_shift_g:\\n\\n  memcpy((void*)0x20000080,\\n         \\\"/sys/module/tcp_dctcp/parameters/dctcp_shift_g\\\\000\\\", 47);\\n  res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000080ul,\\n                /*flags=*/2ul, /*mode=*/0ul);\\n  memcpy((void*)0x20000000, \\\"100\\\\000\\\", 4);\\n  syscall(__NR_write, /*fd=*/r[0], /*val=*/0x20000000ul, /*len=*/4ul);\\n\\nLet\u0027s limit the max value of dctcp_shift_g by param_set_uint_minmax().\\n\\nWith this patch:\\n\\n  # echo 10 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\\n  # cat /sys/module/tcp_dctcp/parameters/dctcp_shift_g\\n  10\\n  # echo 11 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\\n  -bash: echo: write error: Invalid argument\\n\\n[0]:\\nUBSAN: shift-out-of-bounds in net/ipv4/tcp_dctcp.c:143:12\\nshift exponent 100 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\\nCPU: 0 PID: 8083 Comm: syz-executor345 Not tainted 6.9.0-05151-g1b294a1f3561 #2\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\\n1.13.0-1ubuntu1.1 04/01/2014\\nCall Trace:\\n \u003cTASK\u003e\\n __dump_stack lib/dump_stack.c:88 [inline]\\n dump_stack_lvl+0x201/0x300 lib/dump_stack.c:114\\n ubsan_epilogue lib/ubsan.c:231 [inline]\\n __ubsan_handle_shift_out_of_bounds+0x346/0x3a0 lib/ubsan.c:468\\n dctcp_update_alpha+0x540/0x570 net/ipv4/tcp_dctcp.c:143\\n tcp_in_ack_event net/ipv4/tcp_input.c:3802 [inline]\\n tcp_ack+0x17b1/0x3bc0 net/ipv4/tcp_input.c:3948\\n tcp_rcv_state_process+0x57a/0x2290 net/ipv4/tcp_input.c:6711\\n tcp_v4_do_rcv+0x764/0xc40 net/ipv4/tcp_ipv4.c:1937\\n sk_backlog_rcv include/net/sock.h:1106 [inline]\\n __release_sock+0x20f/0x350 net/core/sock.c:2983\\n release_sock+0x61/0x1f0 net/core/sock.c:3549\\n mptcp_subflow_shutdown+0x3d0/0x620 net/mptcp/protocol.c:2907\\n mptcp_check_send_data_fin+0x225/0x410 net/mptcp/protocol.c:2976\\n __mptcp_close+0x238/0xad0 net/mptcp/protocol.c:3072\\n mptcp_close+0x2a/0x1a0 net/mptcp/protocol.c:3127\\n inet_release+0x190/0x1f0 net/ipv4/af_inet.c:437\\n __sock_release net/socket.c:659 [inline]\\n sock_close+0xc0/0x240 net/socket.c:1421\\n __fput+0x41b/0x890 fs/file_table.c:422\\n task_work_run+0x23b/0x300 kernel/task_work.c:180\\n exit_task_work include/linux/task_work.h:38 [inline]\\n do_exit+0x9c8/0x2540 kernel/exit.c:878\\n do_group_exit+0x201/0x2b0 kernel/exit.c:1027\\n __do_sys_exit_group kernel/exit.c:1038 [inline]\\n __se_sys_exit_group kernel/exit.c:1036 [inline]\\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xe4/0x240 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\\nRIP: 0033:0x7f6c2b5005b6\\nCode: Unable to access opcode bytes at 0x7f6c2b50058c.\\nRSP: 002b:00007ffe883eb948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\\nRAX: ffffffffffffffda RBX: 00007f6c2b5862f0 RCX: 00007f6c2b5005b6\\nRDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001\\nRBP: 0000000000000001 R08: 00000000000000e7 R09: ffffffffffffffc0\\nR10: 0000000000000006 R11: 0000000000000246 R12: 00007f6c2b5862f0\\nR13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\\n \u003c/TASK\u003e\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tcp: corrige el desplazamiento fuera de los l\u00edmites en dctcp_update_alpha(). En dctcp_update_alpha(), utilizamos un par\u00e1metro de m\u00f3dulo dctcp_shift_g de la siguiente manera: alpha -= min_not_zero(alpha, alpha \u0026gt;\u0026gt; dctcp_shift_g); ... entregado_ce \u0026lt;\u0026lt;= (10 - dctcp_shift_g); Parece que syzkaller comenz\u00f3 a modificar los par\u00e1metros del m\u00f3dulo y activ\u00f3 el desplazamiento fuera de los l\u00edmites [0] estableciendo 100 en dctcp_shift_g: memcpy((void*)0x20000080, \\\"/sys/module/tcp_dctcp/parameters/dctcp_shift_g\\\\000\\\", 47) ; res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000080ul, /*flags=*/2ul, /*mode=*/0ul); memcpy((void*)0x20000000, \\\"100\\\\000\\\", 4); syscall(__NR_write, /*fd=*/r[0], /*val=*/0x20000000ul, /*len=*/4ul); Limitemos el valor m\u00e1ximo de dctcp_shift_g mediante param_set_uint_minmax(). Con este parche: # echo 10 \u0026gt; /sys/module/tcp_dctcp/parameters/dctcp_shift_g # cat /sys/module/tcp_dctcp/parameters/dctcp_shift_g 10 # echo 11 \u0026gt; /sys/module/tcp_dctcp/parameters/dctcp_shift_g -bash: echo: error de escritura: argumento no v\u00e1lido [0]: UBSAN: desplazamiento fuera de los l\u00edmites en net/ipv4/tcp_dctcp.c:143:12 el exponente de desplazamiento 100 es demasiado grande para el tipo \u0027u32\u0027 de 32 bits (tambi\u00e9n conocido como \u0027int sin signo\u0027 ) CPU: 0 PID: 8083 Comm: syz-executor345 No contaminado 6.9.0-05151-g1b294a1f3561 #2 Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 01/04/2014 Seguimiento de llamadas:  __dump_stack lib/dump_stack.c:88 [en l\u00ednea] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:114 ubsan_epilogue lib/ubsan.c:231 [en l\u00ednea] __ubsan_handle_shift_out_of_bounds+0x346/0x3a0 lib/ubsan.c :468 dctcp_update_alpha+0x540/0x570 net/ipv4/tcp_dctcp.c:143 tcp_in_ack_event net/ipv4/tcp_input.c:3802 [en l\u00ednea] tcp_ack+0x17b1/0x3bc0 net/ipv4/tcp_input.c:3948 v_state_process+0x57a/0x2290 neto/ ipv4/tcp_input.c:6711 tcp_v4_do_rcv+0x764/0xc40 net/ipv4/tcp_ipv4.c:1937 sk_backlog_rcv include/net/sock.h:1106 [en l\u00ednea] __release_sock+0x20f/0x350 net/core/sock.c:2983 release_sock+ 0x61/0x1f0 net/core/sock.c:3549 mptcp_subflow_shutdown+0x3d0/0x620 net/mptcp/protocol.c:2907 mptcp_check_send_data_fin+0x225/0x410 net/mptcp/protocol.c:2976 __mptcp_close+0x238/0x ad0 net/mptcp/protocolo .c:3072 mptcp_close+0x2a/0x1a0 net/mptcp/protocol.c:3127 inet_release+0x190/0x1f0 net/ipv4/af_inet.c:437 __sock_release net/socket.c:659 [en l\u00ednea] sock_close+0xc0/0x240 net/ socket.c:1421 __fput+0x41b/0x890 fs/file_table.c:422 task_work_run+0x23b/0x300 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [en l\u00ednea] do_exit+0x9c8/0x2540 kernel/exit .c:878 do_group_exit+0x201/0x2b0 kernel/exit.c:1027 __do_sys_exit_group kernel/exit.c:1038 [en l\u00ednea] __se_sys_exit_group kernel/exit.c:1036 [en l\u00ednea] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:10 36 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xe4/0x240 arch/x86/entry/common.c:83 Entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x7f6c2b5005b6 C\u00f3digo: no se puede acceder a los bytes del c\u00f3digo de operaci\u00f3n en 0x7f6c2b50058c . RSP: 002b:00007ffe883eb948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 00007f6c2b5862f0 RCX: 00007f6c2b5005b6 RDX: 0000000001 RSI: 000000000000003c RDI: 0000000000000001 RBP: 0000000000000001 R08: 00000000000000e7 R09: ffffffffffffffc0 R10: 06 R11: 0000000000000246 R12: 00007f6c2b5862f0 R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 \"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.18\",\"versionEndExcluding\":\"4.19.316\",\"matchCriteriaId\":\"38710DA2-400D-4570-BDB2-C84CC12E69E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.278\",\"matchCriteriaId\":\"7FDBF235-DA18-49A1-8690-6C7272FD0701\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.219\",\"matchCriteriaId\":\"E9063AF3-D593-43B7-810D-58B87F82F9F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.161\",\"matchCriteriaId\":\"31130639-53FE-4726-8986-434EE2528CB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.93\",\"matchCriteriaId\":\"EEFB78EE-F990-4197-BF1C-156760A55667\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.33\",\"matchCriteriaId\":\"FCE796DF-3B50-4DC6-BAE5-95271068FC9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.9.4\",\"matchCriteriaId\":\"991B9791-966A-4D18-9E8D-A8AB128E5627\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/02261d3f9dc7d1d7be7d778f839e3404ab99034c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/237340dee373b97833a491d2e99fcf1d4a9adafd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3ebc46ca8675de6378e3f8f40768e180bb8afa66\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6aacaa80d962f4916ccf90e2080306cec6c90fcf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8602150286a2a860a1dc55cbd04f99316f19b40a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e65d13ec00a738fa7661925fd5929ab3c765d4be\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/02261d3f9dc7d1d7be7d778f839e3404ab99034c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/237340dee373b97833a491d2e99fcf1d4a9adafd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3ebc46ca8675de6378e3f8f40768e180bb8afa66\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6aacaa80d962f4916ccf90e2080306cec6c90fcf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8602150286a2a860a1dc55cbd04f99316f19b40a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e65d13ec00a738fa7661925fd5929ab3c765d4be\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-265688.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-398330.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-613116.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6aacaa80d962f4916ccf90e2080306cec6c90fcf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8602150286a2a860a1dc55cbd04f99316f19b40a\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e65d13ec00a738fa7661925fd5929ab3c765d4be\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/02261d3f9dc7d1d7be7d778f839e3404ab99034c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/237340dee373b97833a491d2e99fcf1d4a9adafd\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/3ebc46ca8675de6378e3f8f40768e180bb8afa66\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T17:21:20.246Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RST2428P\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SCALANCE XCM-/XRM-/XCH-/XRH-300 family\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.0\", \"lessThan\": \"V3.1.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.0\", \"lessThan\": \"V3.1.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.0\", \"lessThan\": \"V3.1.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.0\", \"lessThan\": \"V3.1.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.0\", \"lessThan\": \"V3.1.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-398330.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-265688.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-613116.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-05-12T11:54:30.036Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-37356\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-21T13:56:45.436880Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-21T13:57:48.242Z\"}}], \"cna\": {\"title\": \"tcp: Fix shift-out-of-bounds in dctcp_update_alpha().\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"6aacaa80d962f4916ccf90e2080306cec6c90fcf\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"8602150286a2a860a1dc55cbd04f99316f19b40a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"e65d13ec00a738fa7661925fd5929ab3c765d4be\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"02261d3f9dc7d1d7be7d778f839e3404ab99034c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"237340dee373b97833a491d2e99fcf1d4a9adafd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"e3118e8359bb7c59555aca60c725106e6d78c5ce\", \"lessThan\": \"3ebc46ca8675de6378e3f8f40768e180bb8afa66\", \"versionType\": \"git\"}], \"programFiles\": [\"net/ipv4/tcp_dctcp.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.18\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"3.18\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.316\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.278\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.219\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.161\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.93\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.33\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/ipv4/tcp_dctcp.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/06d0fe049b51b0a92a70df8333fd85c4ba3eb2c6\"}, {\"url\": \"https://git.kernel.org/stable/c/6aacaa80d962f4916ccf90e2080306cec6c90fcf\"}, {\"url\": \"https://git.kernel.org/stable/c/e9b2f60636d18dfd0dd4965b3316f88dfd6a2b31\"}, {\"url\": \"https://git.kernel.org/stable/c/8602150286a2a860a1dc55cbd04f99316f19b40a\"}, {\"url\": \"https://git.kernel.org/stable/c/e65d13ec00a738fa7661925fd5929ab3c765d4be\"}, {\"url\": \"https://git.kernel.org/stable/c/02261d3f9dc7d1d7be7d778f839e3404ab99034c\"}, {\"url\": \"https://git.kernel.org/stable/c/237340dee373b97833a491d2e99fcf1d4a9adafd\"}, {\"url\": \"https://git.kernel.org/stable/c/3ebc46ca8675de6378e3f8f40768e180bb8afa66\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ntcp: Fix shift-out-of-bounds in dctcp_update_alpha().\\n\\nIn dctcp_update_alpha(), we use a module parameter dctcp_shift_g\\nas follows:\\n\\n  alpha -= min_not_zero(alpha, alpha \u003e\u003e dctcp_shift_g);\\n  ...\\n  delivered_ce \u003c\u003c= (10 - dctcp_shift_g);\\n\\nIt seems syzkaller started fuzzing module parameters and triggered\\nshift-out-of-bounds [0] by setting 100 to dctcp_shift_g:\\n\\n  memcpy((void*)0x20000080,\\n         \\\"/sys/module/tcp_dctcp/parameters/dctcp_shift_g\\\\000\\\", 47);\\n  res = syscall(__NR_openat, /*fd=*/0xffffffffffffff9cul, /*file=*/0x20000080ul,\\n                /*flags=*/2ul, /*mode=*/0ul);\\n  memcpy((void*)0x20000000, \\\"100\\\\000\\\", 4);\\n  syscall(__NR_write, /*fd=*/r[0], /*val=*/0x20000000ul, /*len=*/4ul);\\n\\nLet\u0027s limit the max value of dctcp_shift_g by param_set_uint_minmax().\\n\\nWith this patch:\\n\\n  # echo 10 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\\n  # cat /sys/module/tcp_dctcp/parameters/dctcp_shift_g\\n  10\\n  # echo 11 \u003e /sys/module/tcp_dctcp/parameters/dctcp_shift_g\\n  -bash: echo: write error: Invalid argument\\n\\n[0]:\\nUBSAN: shift-out-of-bounds in net/ipv4/tcp_dctcp.c:143:12\\nshift exponent 100 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\\nCPU: 0 PID: 8083 Comm: syz-executor345 Not tainted 6.9.0-05151-g1b294a1f3561 #2\\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\\n1.13.0-1ubuntu1.1 04/01/2014\\nCall Trace:\\n \u003cTASK\u003e\\n __dump_stack lib/dump_stack.c:88 [inline]\\n dump_stack_lvl+0x201/0x300 lib/dump_stack.c:114\\n ubsan_epilogue lib/ubsan.c:231 [inline]\\n __ubsan_handle_shift_out_of_bounds+0x346/0x3a0 lib/ubsan.c:468\\n dctcp_update_alpha+0x540/0x570 net/ipv4/tcp_dctcp.c:143\\n tcp_in_ack_event net/ipv4/tcp_input.c:3802 [inline]\\n tcp_ack+0x17b1/0x3bc0 net/ipv4/tcp_input.c:3948\\n tcp_rcv_state_process+0x57a/0x2290 net/ipv4/tcp_input.c:6711\\n tcp_v4_do_rcv+0x764/0xc40 net/ipv4/tcp_ipv4.c:1937\\n sk_backlog_rcv include/net/sock.h:1106 [inline]\\n __release_sock+0x20f/0x350 net/core/sock.c:2983\\n release_sock+0x61/0x1f0 net/core/sock.c:3549\\n mptcp_subflow_shutdown+0x3d0/0x620 net/mptcp/protocol.c:2907\\n mptcp_check_send_data_fin+0x225/0x410 net/mptcp/protocol.c:2976\\n __mptcp_close+0x238/0xad0 net/mptcp/protocol.c:3072\\n mptcp_close+0x2a/0x1a0 net/mptcp/protocol.c:3127\\n inet_release+0x190/0x1f0 net/ipv4/af_inet.c:437\\n __sock_release net/socket.c:659 [inline]\\n sock_close+0xc0/0x240 net/socket.c:1421\\n __fput+0x41b/0x890 fs/file_table.c:422\\n task_work_run+0x23b/0x300 kernel/task_work.c:180\\n exit_task_work include/linux/task_work.h:38 [inline]\\n do_exit+0x9c8/0x2540 kernel/exit.c:878\\n do_group_exit+0x201/0x2b0 kernel/exit.c:1027\\n __do_sys_exit_group kernel/exit.c:1038 [inline]\\n __se_sys_exit_group kernel/exit.c:1036 [inline]\\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1036\\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\\n do_syscall_64+0xe4/0x240 arch/x86/entry/common.c:83\\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\\nRIP: 0033:0x7f6c2b5005b6\\nCode: Unable to access opcode bytes at 0x7f6c2b50058c.\\nRSP: 002b:00007ffe883eb948 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7\\nRAX: ffffffffffffffda RBX: 00007f6c2b5862f0 RCX: 00007f6c2b5005b6\\nRDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001\\nRBP: 0000000000000001 R08: 00000000000000e7 R09: ffffffffffffffc0\\nR10: 0000000000000006 R11: 0000000000000246 R12: 00007f6c2b5862f0\\nR13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\\n \u003c/TASK\u003e\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.316\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.278\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.219\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.161\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.93\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.33\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.4\", \"versionStartIncluding\": \"3.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"3.18\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:18:28.367Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-37356\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-12T11:54:30.036Z\", \"dateReserved\": \"2024-06-21T10:13:16.306Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-06-21T10:18:11.642Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

WID-SEC-W-2024-1431

Vulnerability from csaf_certbund - Published: 2024-06-23 22:00 - Updated: 2025-06-04 22:00

Summary

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Der Kernel stellt den Kern des Linux Betriebssystems dar.

Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme: - Linux

CVE-2023-52884

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-31076

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-36489

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-37353

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-37356

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-38381

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-38388

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-38390

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-38391

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

CVE-2024-38621

Affected products

Known affected 11 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Broadcom Brocade SANnav Broadcom	`cpe:/a:broadcom:brocade_sannav:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Open Source Linux Kernel <6.10-rc1 Open Source / Linux Kernel		<6.10-rc1
IBM InfoSphere Guardium IBM	`cpe:/a:ibm:infosphere_guardium:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
IBM QRadar SIEM <7.5.0 UP10 IF01 IBM / QRadar SIEM		<7.5.0 UP10 IF01

References

94 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lore.kernel.org/linux-cve-announce/202406…	external
https://lists.debian.org/debian-lts-announce/2024…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.debian.org/debian-security-announce…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2024:4831	external
https://access.redhat.com/errata/RHSA-2024:4823	external
https://access.redhat.com/errata/RHSA-2024:5065	external
https://access.redhat.com/errata/RHSA-2024:5102	external
https://access.redhat.com/errata/RHSA-2024:5101	external
https://ubuntu.com/security/notices/USN-6953-1	external
https://ubuntu.com/security/notices/USN-6951-1	external
https://linux.oracle.com/errata/ELSA-2024-5101.html	external
https://linux.oracle.com/errata/ELSA-2024-12581.html	external
https://linux.oracle.com/errata/ELSA-2024-12585.html	external
https://linux.oracle.com/errata/ELSA-2024-12584.html	external
https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-20…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://alas.aws.amazon.com/AL2/ALAS-2024-2613.html	external
https://access.redhat.com/errata/RHSA-2024:5363	external
https://ubuntu.com/security/notices/USN-6951-2	external
https://linux.oracle.com/errata/ELSA-2024-5363.html	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-6951-3	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-6951-4	external
https://ubuntu.com/security/notices/USN-6979-1	external
https://access.redhat.com/errata/RHSA-2024:6206	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.opensuse.org/archives/list/security…	external
https://ubuntu.com/security/notices/USN-6999-1	external
https://linux.oracle.com/errata/ELSA-2024-12611.html	external
https://ubuntu.com/security/notices/USN-7003-2	external
https://ubuntu.com/security/notices/USN-7005-1	external
https://ubuntu.com/security/notices/USN-7004-1	external
https://ubuntu.com/security/notices/USN-7007-1	external
https://ubuntu.com/security/notices/USN-7008-1	external
https://ubuntu.com/security/notices/USN-7009-1	external
https://ubuntu.com/security/notices/USN-7005-2	external
https://ubuntu.com/security/notices/USN-7007-2	external
https://access.redhat.com/errata/RHSA-2024:7001	external
https://ubuntu.com/security/notices/USN-6999-2	external
https://ubuntu.com/security/notices/USN-7029-1	external
https://access.redhat.com/errata/RHSA-2024:6997	external
https://ubuntu.com/security/notices/USN-7007-3	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2024:7000	external
https://ubuntu.com/security/notices/USN-7009-2	external
https://linux.oracle.com/errata/ELSA-2024-7000.html	external
https://linux.oracle.com/errata/ELSA-2024-6997.html	external
https://lists.opensuse.org/archives/list/security…	external
https://lists.opensuse.org/archives/list/security…	external
https://errata.build.resf.org/RLSA-2024:7001	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.opensuse.org/archives/list/security…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-7069-1	external
https://ubuntu.com/security/notices/USN-7069-2	external
https://access.redhat.com/errata/RHSA-2024:8318	external
https://www.ibm.com/support/pages/node/7174634	external
https://access.redhat.com/errata/RHSA-2024:9315	external
https://access.redhat.com/errata/RHSA-2024:9497	external
https://access.redhat.com/errata/RHSA-2024:9498	external
https://access.redhat.com/errata/RHSA-2024:9546	external
https://ubuntu.com/security/notices/USN-7110-1	external
https://access.redhat.com/errata/RHSA-2024:10262	external
https://access.redhat.com/errata/RHSA-2024:10772	external
https://access.redhat.com/errata/RHSA-2024:10773	external
https://www.ibm.com/support/pages/node/7181933	external
https://support.broadcom.com/web/ecx/support-cont…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1431 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1431.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1431 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1431"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062131-CVE-2023-52884-5b0d@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062134-CVE-2024-31076-786e@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062136-CVE-2024-36489-7213@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062137-CVE-2024-37353-71d4@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062137-CVE-2024-37356-cc7b@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062137-CVE-2024-38381-07fb@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062137-CVE-2024-38388-fb75@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062138-CVE-2024-38390-395e@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062138-CVE-2024-38391-c792@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Linux CVE Announcement vom 2024-06-23",
        "url": "https://lore.kernel.org/linux-cve-announce/2024062138-CVE-2024-38621-d52e@gregkh/T/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-3840 vom 2024-06-27",
        "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2372-1 vom 2024-07-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018901.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2360-1 vom 2024-07-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018907.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2381-1 vom 2024-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018916.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2394-1 vom 2024-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018922.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5730 vom 2024-07-16",
        "url": "https://lists.debian.org/debian-security-announce/2024/msg00141.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2561-1 vom 2024-07-18",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/019001.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2571-1 vom 2024-07-22",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/019019.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:4831 vom 2024-07-24",
        "url": "https://access.redhat.com/errata/RHSA-2024:4831"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:4823 vom 2024-07-24",
        "url": "https://access.redhat.com/errata/RHSA-2024:4823"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:5065 vom 2024-08-07",
        "url": "https://access.redhat.com/errata/RHSA-2024:5065"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:5102 vom 2024-08-08",
        "url": "https://access.redhat.com/errata/RHSA-2024:5102"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:5101 vom 2024-08-08",
        "url": "https://access.redhat.com/errata/RHSA-2024:5101"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6953-1 vom 2024-08-09",
        "url": "https://ubuntu.com/security/notices/USN-6953-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6951-1 vom 2024-08-09",
        "url": "https://ubuntu.com/security/notices/USN-6951-1"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-5101 vom 2024-08-09",
        "url": "https://linux.oracle.com/errata/ELSA-2024-5101.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12581 vom 2024-08-13",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12581.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12585 vom 2024-08-13",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12585.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12584 vom 2024-08-13",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12584.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASKERNEL-5.4-2024-077 vom 2024-08-13",
        "url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2024-077.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2896-1 vom 2024-08-13",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019185.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2024-2613 vom 2024-08-13",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2613.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:5363 vom 2024-08-14",
        "url": "https://access.redhat.com/errata/RHSA-2024:5363"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6951-2 vom 2024-08-14",
        "url": "https://ubuntu.com/security/notices/USN-6951-2"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-5363 vom 2024-08-15",
        "url": "https://linux.oracle.com/errata/ELSA-2024-5363.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2939-1 vom 2024-08-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019211.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6951-3 vom 2024-08-19",
        "url": "https://ubuntu.com/security/notices/USN-6951-3"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:2973-1 vom 2024-08-20",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-August/019280.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6951-4 vom 2024-08-21",
        "url": "https://ubuntu.com/security/notices/USN-6951-4"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6979-1 vom 2024-08-22",
        "url": "https://ubuntu.com/security/notices/USN-6979-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:6206 vom 2024-09-03",
        "url": "https://access.redhat.com/errata/RHSA-2024:6206"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3190-1 vom 2024-09-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019403.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3195-1 vom 2024-09-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019407.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3194-1 vom 2024-09-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019400.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3209-1 vom 2024-09-11",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/YNWVZVIFSX7PLBJX3I3PDZ4MIBERTN2Y/"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6999-1 vom 2024-09-11",
        "url": "https://ubuntu.com/security/notices/USN-6999-1"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-12611 vom 2024-09-11",
        "url": "https://linux.oracle.com/errata/ELSA-2024-12611.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7003-2 vom 2024-09-12",
        "url": "https://ubuntu.com/security/notices/USN-7003-2"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7005-1 vom 2024-09-12",
        "url": "https://ubuntu.com/security/notices/USN-7005-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7004-1 vom 2024-09-12",
        "url": "https://ubuntu.com/security/notices/USN-7004-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7007-1 vom 2024-09-13",
        "url": "https://ubuntu.com/security/notices/USN-7007-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7008-1 vom 2024-09-13",
        "url": "https://ubuntu.com/security/notices/USN-7008-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7009-1 vom 2024-09-13",
        "url": "https://ubuntu.com/security/notices/USN-7009-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7005-2 vom 2024-09-13",
        "url": "https://ubuntu.com/security/notices/USN-7005-2"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7007-2 vom 2024-09-23",
        "url": "https://ubuntu.com/security/notices/USN-7007-2"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:7001 vom 2024-09-24",
        "url": "https://access.redhat.com/errata/RHSA-2024:7001"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6999-2 vom 2024-09-23",
        "url": "https://ubuntu.com/security/notices/USN-6999-2"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7029-1 vom 2024-09-23",
        "url": "https://ubuntu.com/security/notices/USN-7029-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:6997 vom 2024-09-24",
        "url": "https://access.redhat.com/errata/RHSA-2024:6997"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7007-3 vom 2024-09-23",
        "url": "https://ubuntu.com/security/notices/USN-7007-3"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3383-1 vom 2024-09-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-September/019497.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:7000 vom 2024-09-24",
        "url": "https://access.redhat.com/errata/RHSA-2024:7000"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7009-2 vom 2024-09-25",
        "url": "https://ubuntu.com/security/notices/USN-7009-2"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-7000 vom 2024-09-26",
        "url": "https://linux.oracle.com/errata/ELSA-2024-7000.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-6997 vom 2024-09-26",
        "url": "https://linux.oracle.com/errata/ELSA-2024-6997.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3483-1 vom 2024-09-29",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2HO244EHQ65DPDJ2NOBAXLG7QYWSCUMA/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3483-1 vom 2024-09-29",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2HO244EHQ65DPDJ2NOBAXLG7QYWSCUMA/"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2024:7001 vom 2024-09-30",
        "url": "https://errata.build.resf.org/RLSA-2024:7001"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3559-1 vom 2024-10-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019575.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3569-1 vom 2024-10-09",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6GBL67LQ3MUSYQCQRQH2AZH3XWILTO5A/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3566-1 vom 2024-10-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019578.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3587-1 vom 2024-10-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019588.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3591-1 vom 2024-10-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019587.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:3592-1 vom 2024-10-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-October/019589.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7069-1 vom 2024-10-16",
        "url": "https://ubuntu.com/security/notices/USN-7069-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7069-2 vom 2024-10-17",
        "url": "https://ubuntu.com/security/notices/USN-7069-2"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:8318 vom 2024-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2024:8318"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin",
        "url": "https://www.ibm.com/support/pages/node/7174634"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9315 vom 2024-11-12",
        "url": "https://access.redhat.com/errata/RHSA-2024:9315"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9497 vom 2024-11-13",
        "url": "https://access.redhat.com/errata/RHSA-2024:9497"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9498 vom 2024-11-13",
        "url": "https://access.redhat.com/errata/RHSA-2024:9498"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:9546 vom 2024-11-13",
        "url": "https://access.redhat.com/errata/RHSA-2024:9546"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7110-1 vom 2024-11-14",
        "url": "https://ubuntu.com/security/notices/USN-7110-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:10262 vom 2024-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2024:10262"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:10772 vom 2024-12-04",
        "url": "https://access.redhat.com/errata/RHSA-2024:10772"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2024:10773 vom 2024-12-04",
        "url": "https://access.redhat.com/errata/RHSA-2024:10773"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7181933 vom 2025-01-29",
        "url": "https://www.ibm.com/support/pages/node/7181933"
      },
      {
        "category": "external",
        "summary": "Brocade Security Advisory BSA-2025-2895 vom 2025-02-13",
        "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25398"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20008-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021403.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20028-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021386.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20047-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021306.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20044-1 vom 2025-06-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021334.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Linux Kernel: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
    "tracking": {
      "current_release_date": "2025-06-04T22:00:00.000+00:00",
      "generator": {
        "date": "2025-06-05T06:12:32.077+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2024-1431",
      "initial_release_date": "2024-06-23T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-06-23T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-06-27T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2024-07-09T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-07-10T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-07-15T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2024-07-18T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-07-22T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-07-24T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-08-06T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-08-07T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-08-08T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-08-11T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-08-12T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-08-13T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Amazon und SUSE aufgenommen"
        },
        {
          "date": "2024-08-14T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-08-15T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-08-19T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-08-21T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-08-22T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-09-03T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-09-10T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-09-11T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von SUSE, Ubuntu und Oracle Linux aufgenommen"
        },
        {
          "date": "2024-09-12T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-09-15T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-09-22T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-09-23T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat, Ubuntu und SUSE aufgenommen"
        },
        {
          "date": "2024-09-24T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-09-25T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-09-29T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-09-30T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2024-10-09T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-10-10T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-10-15T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-10-17T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-10-23T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-10-31T23:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-11-12T23:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-11-13T23:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-11-14T23:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2024-11-25T23:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2024-12-03T23:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-01-29T23:00:00.000+00:00",
          "number": "42",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-02-13T23:00:00.000+00:00",
          "number": "43",
          "summary": "Neue Updates von BROCADE aufgenommen"
        },
        {
          "date": "2025-06-04T22:00:00.000+00:00",
          "number": "44",
          "summary": "Neue Updates von SUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "44"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Broadcom Brocade SANnav",
            "product": {
              "name": "Broadcom Brocade SANnav",
              "product_id": "T034392",
              "product_identification_helper": {
                "cpe": "cpe:/a:broadcom:brocade_sannav:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Broadcom"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM InfoSphere Guardium",
            "product": {
              "name": "IBM InfoSphere Guardium",
              "product_id": "T002366",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:infosphere_guardium:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP10 IF01",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP10 IF01",
                  "product_id": "T038741"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP10 IF01",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP10 IF01",
                  "product_id": "T038741-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up10_if01"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c6.10-rc1",
                "product": {
                  "name": "Open Source Linux Kernel \u003c6.10-rc1",
                  "product_id": "T035616"
                }
              },
              {
                "category": "product_version",
                "name": "6.10-rc1",
                "product": {
                  "name": "Open Source Linux Kernel 6.10-rc1",
                  "product_id": "T035616-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:linux:linux_kernel:6.10-rc1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Linux Kernel"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-52884",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2023-52884"
    },
    {
      "cve": "CVE-2024-31076",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-31076"
    },
    {
      "cve": "CVE-2024-36489",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-36489"
    },
    {
      "cve": "CVE-2024-37353",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-37353"
    },
    {
      "cve": "CVE-2024-37356",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-37356"
    },
    {
      "cve": "CVE-2024-38381",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-38381"
    },
    {
      "cve": "CVE-2024-38388",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-38388"
    },
    {
      "cve": "CVE-2024-38390",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-38390"
    },
    {
      "cve": "CVE-2024-38391",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-38391"
    },
    {
      "cve": "CVE-2024-38621",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "T034392",
          "67646",
          "T000126",
          "T035616",
          "T002366",
          "398363",
          "T004914",
          "T032255",
          "T038741"
        ]
      },
      "release_date": "2024-06-23T22:00:00.000+00:00",
      "title": "CVE-2024-38621"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-37356 (GCVE-0-2024-37356)

WID-SEC-W-2024-1431

Tags

Sightings

Nomenclature