< Back

CVE-2024-46859

Updated on 27 Sep 2024

Severity

7.8 High severity

Details

CVSS score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID: CWE-129 Improper Validation of Array Index
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses

The panasonic laptop code in various places uses the SINF array with index values of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SINF array is big enough.

Not all panasonic laptops have this many SINF array entries, for example the Toughbook CF-18 model only has 10 SINF array entries. So it only supports the AC+DC brightness entries and mute.

Check that the SINF array has a minimum size which covers all AC+DC brightness entries and refuse to load if the SINF array is smaller.

For higher SINF indexes hide the sysfs attributes when the SINF array does not contain an entry for that attribute, avoiding show()/store() accessing the array out of bounds and add bounds checking to the probe() and resume() code accessing these.

Details

Affected product:: AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:: kernel @ 3.10.0 (+15 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
Debian 12	Ready For Release	—
Oracle Linux 8 UEK 7	Released	47 kernels 5.15.0-0.30.19.el8uek 5.15.0-0.30.20.1.el8uek 5.15.0-0.30.20.el8uek 5.15.0-1.43.4.1.el8uek 5.15.0-1.43.4.2.el8uek 5.15.0-100.96.32.el8uek 5.15.0-101.103.2.1.el8uek 5.15.0-102.110.5.1.el8uek 5.15.0-102.110.5.el8uek 5.15.0-103.114.4.el8uek 5.15.0-104.119.4.2.el8uek 5.15.0-105.125.6.2.1.el8uek 5.15.0-105.125.6.2.2.el8uek 5.15.0-105.125.6.2.el8uek 5.15.0-106.131.4.el8uek 5.15.0-2.52.3.el8uek 5.15.0-200.131.27.1.el8uek 5.15.0-200.131.27.el8uek 5.15.0-201.135.6.el8uek 5.15.0-202.135.2.el8uek 5.15.0-203.146.5.1.el8uek 5.15.0-204.147.6.2.el8uek 5.15.0-204.147.6.3.el8uek 5.15.0-205.149.5.1.el8uek 5.15.0-205.149.5.4.el8uek 5.15.0-206.153.7.1.el8uek 5.15.0-206.153.7.el8uek 5.15.0-207.156.6.el8uek 5.15.0-208.159.3.2.el8uek 5.15.0-208.159.3.el8uek 5.15.0-209.161.7.1.el8uek 5.15.0-209.161.7.2.el8uek 5.15.0-209.161.7.el8uek 5.15.0-210.163.7.el8uek 5.15.0-3.60.5.1.el8uek 5.15.0-300.163.18.1.1.el8uek 5.15.0-300.163.18.1.el8uek 5.15.0-300.163.18.7.el8uek 5.15.0-300.163.18.el8uek 5.15.0-301.163.5.2.el8uek 5.15.0-302.167.6.1.el8uek 5.15.0-302.167.6.el8uek 5.15.0-4.70.5.2.el8uek 5.15.0-5.76.5.1.el8uek 5.15.0-6.80.3.1.el8uek 5.15.0-7.86.6.1.el8uek 5.15.0-8.91.4.1.el8uek
Oracle Linux 9 UEK 7	Released	47 kernels 5.15.0-0.30.19.el9uek 5.15.0-105.125.6.2.el9uek 5.15.0-0.30.20.1.el9uek 5.15.0-0.30.20.el9uek 5.15.0-1.43.4.1.el9uek 5.15.0-1.43.4.2.el9uek 5.15.0-100.96.32.el9uek 5.15.0-101.103.2.1.el9uek 5.15.0-102.110.5.1.el9uek 5.15.0-102.110.5.el9uek 5.15.0-103.114.4.el9uek 5.15.0-104.119.4.2.el9uek 5.15.0-105.125.6.2.1.el9uek 5.15.0-105.125.6.2.2.el9uek 5.15.0-106.131.4.el9uek 5.15.0-2.52.3.el9uek 5.15.0-200.131.27.1.el9uek 5.15.0-200.131.27.el9uek 5.15.0-201.135.6.el9uek 5.15.0-202.135.2.el9uek 5.15.0-203.146.5.1.el9uek 5.15.0-204.147.6.2.el9uek 5.15.0-204.147.6.3.el9uek 5.15.0-205.149.5.1.el9uek 5.15.0-205.149.5.4.el9uek 5.15.0-206.153.7.1.el9uek 5.15.0-206.153.7.el9uek 5.15.0-207.156.6.el9uek 5.15.0-208.159.3.2.el9uek 5.15.0-208.159.3.el9uek 5.15.0-209.161.7.1.el9uek 5.15.0-209.161.7.2.el9uek 5.15.0-209.161.7.el9uek 5.15.0-210.163.7.el9uek 5.15.0-3.60.5.1.el9uek 5.15.0-300.163.18.1.1.el9uek 5.15.0-300.163.18.1.el9uek 5.15.0-300.163.18.7.el9uek 5.15.0-300.163.18.el9uek 5.15.0-301.163.5.2.el9uek 5.15.0-302.167.6.1.el9uek 5.15.0-302.167.6.el9uek 5.15.0-4.70.5.2.el9uek 5.15.0-5.76.5.1.el9uek 5.15.0-6.80.3.1.el9uek 5.15.0-7.86.6.1.el9uek 5.15.0-8.91.4.1.el9uek
Proxmox VE 7 5.15	Will Not Fix	47 kernels 5.15.5-1-pve-5.15.5-1 5.15.12-1-pve-5.15.12-2 5.15.12-1-pve-5.15.12-3 5.15.17-1-pve-5.15.17-1 5.15.19-1-pve-5.15.19-1 5.15.19-2-pve-5.15.19-2 5.15.19-2-pve-5.15.19-3 5.15.27-1-pve-5.15.27-1 5.15.30-1-pve-5.15.30-1 5.15.30-2-pve-5.15.30-3 5.15.35-1-pve-5.15.35-1 5.15.35-1-pve-5.15.35-2 5.15.35-1-pve-5.15.35-3 5.15.35-2-pve-5.15.35-4 5.15.35-2-pve-5.15.35-5 5.15.35-3-pve-5.15.35-6 5.15.39-1-pve-5.15.39-1 5.15.39-2-pve-5.15.39-2 5.15.39-3-pve-5.15.39-3 5.15.39-4-pve-5.15.39-4 5.15.7-1-pve-5.15.7-1 5.15.53-1-pve-5.15.53-1 5.15.60-1-pve-5.15.60-1 5.15.60-2-pve-5.15.60-2 5.15.64-1-pve-5.15.64-1 5.15.74-1-pve-5.15.74-1 5.15.83-1-pve-5.15.83-1 5.15.102-1-pve-5.15.102-1 5.15.104-1-pve-5.15.104-1 5.15.104-1-pve-5.15.104-2 5.15.107-1-pve-5.15.107-1 5.15.107-2-pve-5.15.107-2 5.15.85-1-pve-5.15.85-1 5.15.108-1-pve-5.15.108-1 5.15.108-1-pve-5.15.108-2 5.15.116-1-pve-5.15.116-1 5.15.126-1-pve-5.15.126-1 5.15.131-1-pve-5.15.131-1 5.15.131-1-pve-5.15.131-2 5.15.131-2-pve-5.15.131-3 5.15.136-1-pve-5.15.136-1 5.15.111-1-pve-5.15.111-1 5.15.143-1-pve-5.15.143-1 5.15.149-1-pve-5.15.149-1 5.15.152-1-pve-5.15.152-1 5.15.158-1-pve_5.15.158-1 5.15.158-2-pve_5.15.158-2
Ubuntu 20.04 HWE AWS	Will Not Fix	49 kernels 5.15.0-1026.30~20.04.2 5.15.0-1022.26~20.04.1 5.15.0-1023.27~20.04.1 5.15.0-1021.25~20.04.1 5.15.0-1020.24~20.04.1 5.15.0-1017.21~20.04.1 5.15.0-1019.23~20.04.1 5.15.0-1014.18~20.04.1 5.15.0-1015.19~20.04.1 5.15.0-1018.22~20.04.1 5.15.0-1027.31~20.04.1 5.15.0-1028.32~20.04.1 5.15.0-1030.34~20.04.1 5.15.0-1031.35~20.04.1 5.15.0-1033.37~20.04.1 5.15.0-1034.38~20.04.1 5.15.0-1035.39~20.04.1 5.15.0-1036.40~20.04.1 5.15.0-1037.41~20.04.1 5.15.0-1038.43~20.04.1 5.15.0-1039.44~20.04.1 5.15.0-1040.45~20.04.1 5.15.0-1041.46~20.04.1 5.15.0-1043.48~20.04.1 5.15.0-1044.49~20.04.1 5.15.0-1045.50~20.04.1 5.15.0-1047.52~20.04.1 5.15.0-1048.53~20.04.1 5.15.0-1049.54~20.04.1 5.15.0-1050.55~20.04.1 5.15.0-1051.56~20.04.1 5.15.0-1052.57~20.04.1 5.15.0-1053.58~20.04.1 5.15.0-1055.60~20.04.1 5.15.0-1056.61~20.04.1 5.15.0-1057.63~20.04.1 5.15.0-1058.64~20.04.1 5.15.0-1061.67~20.04.1 5.15.0-1062.68~20.04.1 5.15.0-1063.69~20.04.1 5.15.0-1064.70~20.04.1 5.15.0-1065.71~20.04.1 5.15.0-1066.72~20.04.1 5.15.0-1067.73~20.04.1 5.15.0-1068.74~20.04.1 5.15.0-1069.75~20.04.1 5.15.0-1070.76~20.04.1 5.15.0-1071.77~20.04.1 5.15.0-1072.78~20.04.1
Ubuntu 20.04 HWE Azure	Will Not Fix	32 kernels 5.15.0-1029.36~20.04.1 5.15.0-1022.27~20.04.1 5.15.0-1023.29~20.04.1 5.15.0-1021.26~20.04.1 5.15.0-1020.25~20.04.1 5.15.0-1017.20~20.04.1 5.15.0-1019.24~20.04.1 5.15.0-1008.9~20.04.1 5.15.0-1013.16~20.04.1 5.15.0-1014.17~20.04.1 5.15.0-1024.30~20.04.1 5.15.0-1034.41~20.04.1 5.15.0-1049.56~20.04.1 5.15.0-1050.57~20.04.1 5.15.0-1054.62~20.04.1 5.15.0-1056.64~20.04.1 5.15.0-1057.65~20.04.1 5.15.0-1058.66~20.04.2 5.15.0-1059.67~20.04.1 5.15.0-1060.69~20.04.1 5.15.0-1061.70~20.04.1 5.15.0-1063.72~20.04.1 5.15.0-1064.73~20.04.1 5.15.0-1067.76~20.04.1 5.15.0-1068.77~20.04.1 5.15.0-1065.74~20.04.1 5.15.0-1070.79~20.04.1 5.15.0-1071.80~20.04.1 5.15.0-1072.81~20.04.1 5.15.0-1073.82~20.04.1 5.15.0-1074.83~20.04.1 5.15.0-1075.84~20.04.1
Ubuntu 22.04	Will Not Fix	63 kernels 5.15.0-27.28 5.15.0-33.34 5.15.0-37.39 5.15.0-39.42 5.15.0-25.25 5.15.0-28.29 5.15.0-29.30 5.15.0-30.31 5.15.0-41.44 5.15.0-43.46 5.15.0-46.49 5.15.0-35.36 5.15.0-47.51 5.15.0-48.54 5.15.0-40.43 5.15.0-50.56 5.15.0-52.58 5.15.0-53.59 5.15.0-56.62 5.15.0-54.60 5.15.0-57.63 5.15.0-58.64 5.15.0-60.66 5.15.0-67.74 5.15.0-69.76 5.15.0-70.77 5.15.0-71.78 5.15.0-72.79 5.15.0-68.75 5.15.0-73.80 5.15.0-75.82 5.15.0-76.83 5.15.0-78.85 5.15.0-79.86 5.15.0-82.91 5.15.0-83.92 5.15.0-84.93 5.15.0-86.96 5.15.0-74.81 5.15.0-87.97 5.15.0-88.98 5.15.0-89.99 5.15.0-91.101 5.15.0-92.102 5.15.0-94.104 5.15.0-97.107 5.15.0-100.110 5.15.0-101.111 5.15.0-102.112 5.15.0-105.115 5.15.0-106.116 5.15.0-107.117 5.15.0-112.122 5.15.0-113.123 5.15.0-116.126 5.15.0-117.127 5.15.0-118.128 5.15.0-119.129 5.15.0-121.131 5.15.0-122.132 5.15.0-124.134 5.15.0-125.135 5.15.0-126.136
Ubuntu 22.04 AWS	Will Not Fix	56 kernels 5.15.0-1005.7 5.15.0-1008.10 5.15.0-1011.14 5.15.0-1013.17 5.15.0-1015.19 5.15.0-1017.21 5.15.0-1009.11 5.15.0-1020.24 5.15.0-1021.25 5.15.0-1022.26 5.15.0-1023.27 5.15.0-1026.30 5.15.0-1004.6 5.15.0-1014.18 5.15.0-1018.22 5.15.0-1024.29 5.15.0-1027.31 5.15.0-1028.32 5.15.0-1030.34 5.15.0-1031.35 5.15.0-1033.37 5.15.0-1034.38 5.15.0-1035.39 5.15.0-1036.40 5.15.0-1032.36 5.15.0-1037.41 5.15.0-1038.43 5.15.0-1039.44 5.15.0-1040.45 5.15.0-1042.47 5.15.0-1043.48 5.15.0-1044.49 5.15.0-1045.50 5.15.0-1047.52 5.15.0-1048.53 5.15.0-1049.54 5.15.0-1050.55 5.15.0-1051.56 5.15.0-1052.57 5.15.0-1053.58 5.15.0-1055.60 5.15.0-1056.61 5.15.0-1057.63 5.15.0-1060.66 5.15.0-1061.67 5.15.0-1062.68 5.15.0-1063.69 5.15.0-1064.70 5.15.0-1065.71 5.15.0-1066.72 5.15.0-1067.73 5.15.0-1068.74 5.15.0-1069.75 5.15.0-1070.76 5.15.0-1071.77 5.15.0-1072.78
Ubuntu 22.04 Azure	Will Not Fix	52 kernels 5.15.0-1005.6 5.15.0-1007.8 5.15.0-1010.12 5.15.0-1012.15 5.15.0-1014.17 5.15.0-1017.20 5.15.0-1008.9 5.15.0-1019.24 5.15.0-1020.25 5.15.0-1021.26 5.15.0-1022.27 5.15.0-1003.4 5.15.0-1013.16 5.15.0-1023.29 5.15.0-1029.36 5.15.0-1024.30 5.15.0-1034.41 5.15.0-1035.42 5.15.0-1036.43 5.15.0-1037.44 5.15.0-1038.45 5.15.0-1039.46 5.15.0-1040.47 5.15.0-1041.48 5.15.0-1042.49 5.15.0-1045.52 5.15.0-1046.53 5.15.0-1047.54 5.15.0-1049.56 5.15.0-1044.51 5.15.0-1050.57 5.15.0-1051.59 5.15.0-1052.60 5.15.0-1053.61 5.15.0-1054.62 5.15.0-1056.64 5.15.0-1057.65 5.15.0-1058.66 5.15.0-1059.67 5.15.0-1060.69 5.15.0-1061.70 5.15.0-1063.72 5.15.0-1064.73 5.15.0-1066.75 5.15.0-1067.76 5.15.0-1068.77 5.15.0-1070.79 5.15.0-1071.80 5.15.0-1072.81 5.15.0-1073.82 5.15.0-1074.83 5.15.0-1075.84
Ubuntu 24.04	Ready For Release	—

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2024-46859

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!