CVE-2024-1151

Description

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.

Reserved 2024-02-01 | Published 2024-02-11 | Updated 2024-11-24 | Assigner redhat

Problem types

Stack-based Buffer Overflow

Product status

Default status
affected

0:5.14.0-503.11.1.el9_5 before *
unaffected

Default status
affected

0:5.14.0-503.11.1.el9_5 before *
unaffected

Default status
affected

0:5.14.0-284.75.1.el9_2 before *
unaffected

Default status
affected

0:5.14.0-284.75.1.rt14.360.el9_2 before *
unaffected

Default status
unaffected

Default status
unaffected

Default status
unaffected

Default status
affected

Default status
affected

Default status
affected

Timeline

2024-02-01:	Reported to Red Hat.
2024-02-07:	Made public.

Credits

This issue was discovered by Aaron Conole (Red Hat).

References

access.redhat.com/errata/RHSA-2024:4823 (RHSA-2024:4823) vendor-advisory

access.redhat.com/errata/RHSA-2024:4831 (RHSA-2024:4831) vendor-advisory

access.redhat.com/errata/RHSA-2024:9315 (RHSA-2024:9315) vendor-advisory

access.redhat.com/security/cve/CVE-2024-1151 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2262241 (RHBZ#2262241) issue-tracking

lore.kernel.org/...40207132416.1488485-1-aconole@redhat.com/

cve.org (CVE-2024-1151)

nvd.nist.gov (CVE-2024-1151)

Download JSON