Junglewise Threat Intelligence

CVE-2024-38560: Linux Kernel out-of-bounds read in BFA SCSI driver debugfs

CVE-2024-38560 · Severity: high · CVSS 7.1 · Published 2024-06-19

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability exists in the Linux kernel's BFA SCSI driver, which manages certain storage hardware connections. A local attacker could exploit this flaw to read sensitive information from the system's memory or cause a system crash. This could lead to unauthorized data access or a disruption of services on affected Linux systems.

Technical details

An out-of-bounds (OOB) read vulnerability exists in the Linux kernel BFA SCSI driver within the bfad_debugfs.c component. The functions bfad_debugfs_write_regrd and bfad_debugfs_write_regwr use memdup_user to copy a buffer from userspace but fail to ensure the resulting kernel buffer is NUL-terminated. Subsequent calls to sscanf on this non-terminated buffer can result in an OOB read. A local user with access to these debugfs entries can trigger the flaw to leak kernel memory or cause a kernel panic. The issue has been resolved by replacing memdup_user with memdup_user_nul to guarantee proper string termination.

Affected products

  • Linux Linux Kernel 3.19 to 4.19.316, 4.20 to 5.4.278, 5.5 to 5.10.219, 5.11 to 5.15.161, 5.16 to 6.1.93, 6.2 to 6.6.33, 6.7 to 6.8.12, 6.9 to 6.9.3

Timeline

  • 2024-04-24: other: Patch authored
  • 2024-06-19: disclosed: CVE published

References

Related threats