#VU95072 Resource management error in Linux kernel - CVE-2024-41068

Vulnerability identifier: #VU95072

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41068

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the sclp_init() function in drivers/s390/char/sclp.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/a778987afc36d5dc02a1f82d352a81edcaf7eb83
https://git.kernel.org/stable/c/455a6653d8700a81aa8ed2b6442a3be476007090
https://git.kernel.org/stable/c/2e51db7ab71b89dc5a17068f5e201c69f13a4c9a
https://git.kernel.org/stable/c/cf521049fcd07071ed42dc9758fce7d5ee120ec6
https://git.kernel.org/stable/c/79b4be70d5a160969b805f638ac5b4efd0aac7a3
https://git.kernel.org/stable/c/0a31b3fdc7e735c4f8c65fe4339945c717ed6808
https://git.kernel.org/stable/c/be0259796d0b76bbc7461e12c186814a9e58244c
https://git.kernel.org/stable/c/6434b33faaa063df500af355ee6c3942e0f8d982

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.