CVE-2024-41044

July 29, 2024, 4:21 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'ppp_async_encode()' assumes valid LCP packets (with code from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that LCP packet has an actual body beyond PPP_LCP header bytes, and reject claimed-as-LCP but actually malformed data otherwise.

Product(s) Impacted

Product Versions
Linux kernel
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/099502ca410922b56353ccef2749bc0de669da78
https://git.kernel.org/stable/c/3134bdf7356ed952dcecb480861d2afcc1e40492
https://git.kernel.org/stable/c/3ba12c2afd933fc1bf800f6d3f6c7ec8f602ce56
https://git.kernel.org/stable/c/6e8f1c21174f9482033bbb59f13ce1a8cbe843c3
https://git.kernel.org/stable/c/97d1efd8be26615ff680cdde86937d5943138f37
https://git.kernel.org/stable/c/d683e7f3fc48f59576af34631b4fb07fd931343e
https://git.kernel.org/stable/c/ebc5c630457783d17d0c438b0ad70b232a64a82f
https://git.kernel.org/stable/c/f2aeb7306a898e1cbd03963d376f4b6656ca2b55

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-07-29
CVE-2024-41044

Timeline

Published: July 29, 2024, 3:15 p.m.
Last Modified: July 29, 2024, 4:21 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.