Vulnerability details
CVE-2024-58010
Linux Linux
binfmt_flat: Fix integer overflow bug on 32 bit systems
CVSS 3.1
7.8High
Official description
In the Linux kernel, the following vulnerability has been resolved: binfmt_flat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit systems the calculation of "full_data" could be wrong. full_data = data_len + relocs * sizeof(unsigned long);
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 4.8 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < 6fb98e0576ea155267e206286413dcb3a3d55c12 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < bc8ca18b8ef4648532c001bd6c8151143b569275 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < 95506c7f33452450346fbe2975c1359100f854ca | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < 0b6be54d7386b7addbf9e5947366f94aad046938 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < a009378af674b808efcca1e2e67916e79ce866b3 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < 8e8cd712bb06a507b26efd2a56155076aa454345 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < 55cf2f4b945f6a6416cc2524ba740b83cc9af25a | CVEProject cvelistV5 (CNA) |
| Linux | Linux | c995ee28d29d6f256c3a8a6c4e66469554374f25 ≤ v < d17ca8f2dfcf423c439859995910a20e38b86f00 | CVEProject cvelistV5 (CNA) |
References and advisories
10- https://git.kernel.org/stable/c/0b6be54d7386b7addbf9e5947366f94aad046938
- https://git.kernel.org/stable/c/6fb98e0576ea155267e206286413dcb3a3d55c12
- https://git.kernel.org/stable/c/bc8ca18b8ef4648532c001bd6c8151143b569275
- https://git.kernel.org/stable/c/95506c7f33452450346fbe2975c1359100f854ca
- https://git.kernel.org/stable/c/d17ca8f2dfcf423c439859995910a20e38b86f00
- https://git.kernel.org/stable/c/a009378af674b808efcca1e2e67916e79ce866b3
- https://git.kernel.org/stable/c/8e8cd712bb06a507b26efd2a56155076aa454345
- https://git.kernel.org/stable/c/55cf2f4b945f6a6416cc2524ba740b83cc9af25a
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-02-27
- Last updated
- 2026-08-05
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.27%
Probability of exploitation in 30 days
19.2%
Percentile (among all CVEs)
Weaknesses (CWE)
- —