#VU102078 Out-of-bounds read in Linux kernel - CVE-2024-56650

Vulnerability identifier: #VU102078

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56650

CWE-ID: CWE-125

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the led_tg_check() function in net/netfilter/xt_LED.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/04317f4eb2aad312ad85c1a17ad81fe75f1f9bc7
https://git.kernel.org/stable/c/147a42bb02de8735cb08476be6d0917987d022c2
https://git.kernel.org/stable/c/36a9d94dac28beef6b8abba46ba8874320d3e800
https://git.kernel.org/stable/c/a9bcc0b70d9baf3ff005874489a0dc9d023b54c3
https://git.kernel.org/stable/c/ab9916321c95f5280b72b4c5055e269f98627efe
https://git.kernel.org/stable/c/ad28612ebae1fcc1104bd432e99e99d87f6bfe09
https://git.kernel.org/stable/c/c40c96d98e536fc1daaa125c2332b988615e30a4

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.