Vulnerability identifier: #VU91449

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-26999

CWE-ID: CWE-667

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the pmz_receive_chars() function in drivers/tty/serial/pmac_zilog.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
http://git.kernel.org/stable/c/7a3bbe41efa55323b6ea3c35fa15941d4dbecdef
http://git.kernel.org/stable/c/bbaafbb4651fede8d3c3881601ecaa4f834f9d3f
http://git.kernel.org/stable/c/52aaf1ff14622a04148dbb9ccce6d9de5d534ea7
http://git.kernel.org/stable/c/ca09dfc3cfdf89e6af3ac24e1c6c0be5c575a729
http://git.kernel.org/stable/c/1be3226445362bfbf461c92a5bcdb1723f2e4907
http://git.kernel.org/stable/c/69a02273e288011b521ee7c1f3ab2c23fda633ce
http://git.kernel.org/stable/c/d679c816929d62af51c8e6d7fc0e165c9412d2f3
http://git.kernel.org/stable/c/ab86cf6f8d24e63e9aca23da5108af1aa5483928

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.