What is CVE-2024-43825?

CVE-2024-43825 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, classified as a Out-of-bounds Write flaw (CWE-787), affecting Linux kernel versions from 6.4 onward and patched in 6.6.44, 6.10.3 and 6.11. CVE-2024-43825 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-43825?

CVE-2024-43825 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2024-43825?

Yes, CVE-2024-43825 has been patched. Fixed versions include 6.6.44, 6.10.3 and 6.11. If you are running Linux kernel 6.4 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-43825 actively exploited?

CVE-2024-43825 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Out-of-bounds Write (CWE-787)?

The product writes data past the end or before the beginning of the intended buffer. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/787.html

CVE-2024-43825

High

In the Linux kernel, the following vulnerability has been resolved: iio: Fix the sorting functionality in iio_gts_build_avail_time_table The sorting in iio_gts_build_avail_time_table is not working as intended. It could result in an out-of-bounds access when the time is zero. Here are more details: 1. When the gts->itime_table[i].time_us is zero, e.g., the time sequence is `3, 0, 1`, the inner for-loop will not terminate and do out-of-bound writes. This is because once `times[j] > new`, the value `new` will be added in the current position and the `times[j]` will be moved to `j+1` position, which makes the if-condition always hold. Meanwhile, idx will be added one, making the loop keep running without termination and out-of-bound write. 2. If none of the gts->itime_table[i].time_us is zero, the elements will just be copied without being sorted as described in the comment "Sort times from all tables to one and remove duplicates". For more details, please refer to https://lore.kernel.org/all/[email protected].

Package Linux Kernel

Published 2024-08-17

Last modified 2024-09-30

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-787

CVE-2024-43825 is a Out-of-bounds Write vulnerability

What is Out-of-bounds Write?

The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE

Affected versions

Linux kernel versions 6.4 and later are affected. Fixed in 6.6.44, 6.10.3, 6.11 and their respective stable series.

Affected from

≥ 6.4

Fixed in

✓ 6.6.44 6.6.x ✓ 6.10.3 6.10.x ✓ 6.11

References

3 total

Kernel Git
https://git.kernel.org/stable/c/31ff8464ef540785344994986a010031410f9ff3

Patch
Kernel Git
https://git.kernel.org/stable/c/5acc3f971a01be48d5ff4252d8f9cdb87998cdfb

Patch
Kernel Git
https://git.kernel.org/stable/c/b5046de32fd1532c3f67065197fc1da82f0b5193

Patch

Details

CVE ID CVE-2024-43825

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-08-17

Modified 2024-09-30

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-43825?

CVE-2024-43825 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . It affects Linux kernel versions from 6.4 onward and has been patched in 6.6.44, 6.10.3 and 6.11. CVE-2024-43825 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-43825?

CVE-2024-43825 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2024-43825?

Yes. CVE-2024-43825 has been patched. Fixed versions include 6.6.44, 6.10.3 and 6.11. If you are running Linux kernel 6.4 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-43825 actively exploited?

No. CVE-2024-43825 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.