CVE-2024-46744
Improper Link Resolution Before File Access ('Link Following') (CWE-59)
Summary
A vulnerability in the Linux kernel's SquashFS implementation has been identified. The issue stems from improper sanity checking of symbolic link sizes, which can lead to the processing of corrupted symbolic link data. This vulnerability allows for the creation of an uninitialized page due to integer overflow when handling a corrupted symlink size.
Impact
This vulnerability could potentially lead to arbitrary code execution, information disclosure, or system crashes. An attacker with local access and low privileges could exploit this flaw to elevate privileges, access sensitive information, or cause a denial of service. The high impact on confidentiality, integrity, and availability indicates that successful exploitation could compromise the entire system.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
Patches are available for this vulnerability. Multiple patch commits have been made to the Linux kernel git repository to address this issue. These patches add a sanity check to ensure that the symbolic link size is not larger than expected.
Mitigation
To mitigate this vulnerability, it is strongly recommended to update the Linux kernel to a patched version. The following versions should be updated: 1. Versions before 4.19.322 2. Versions 4.20 to 5.4.284 3. Versions 5.5 to 5.10.226 4. Versions 5.11 to 5.15.167 5. Versions 5.16 to 6.1.110 6. Versions 6.2 to 6.6.51 7. Versions 6.7 to 6.10.10 8. Specific release candidates: 6.11-rc1, 6.11-rc2, and 6.11-rc3 If immediate patching is not possible, consider restricting local access to the system and monitoring for unusual activities or crashes related to SquashFS operations.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
NVD published the first details for CVE-2024-46744
Feedly found the first article mentioning CVE-2024-46744. See article
EPSS Score was set to: 0.04% (Percentile: 13.8%)
A CVSS base score of 7.8 has been assigned.
Detection for the vulnerability has been added to Nessus (208045)
Detection for the vulnerability has been added to Nessus (208038)
Detection for the vulnerability has been added to Nessus (208053)
Detection for the vulnerability has been added to Nessus (208099)
The provided sentences do not contain specific details about CVE-2024-46744, such as its criticality, CVSS score, exploitation status, proof-of-concept exploits, mitigations, detections, patches, or downstream impacts. Therefore, a summary cannot be accurately constructed based on the information given. Further details would be necessary to provide a comprehensive overview of the vulnerability. See article