CVE-2024-42159

Updated: 2024-08-04 06:29:50.53585

Description:

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask, values larger then size of this field shouldn't be allowed.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2024:1725293298 2024-09-02 12:15:33
AlmaLinux 9.2 FIPS kernel 5.14.0 7.8 HIGH Released CLSA-2024:1725304408 2024-09-02 17:26:24
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-08-21 12:19:09
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2024-08-21 12:19:09
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2024-08-16 12:18:24
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Not Vulnerable 2024-08-21 12:19:09
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2024:1725871927 2024-09-09 05:26:40
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-08-21 12:19:09
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Needs Triage 2024-09-03 12:12:30
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2024-08-21 12:19:09
Total: 13