CVE-2024-39487

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()

In function bond_option_arp_ip_targets_set(), if newval->string is an

empty string, newval->string+1 will point to the byte after the

string, causing an out-of-bound read.

BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418

Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107

CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014

Call Trace:

<TASK>

__dump_stack lib/dump_stack.c:88 [inline]

dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106

print_address_description mm/kasan/report.c:364 [inline]

print_report+0xc1/0x5e0 mm/kasan/report.c:475

kasan_report+0xbe/0xf0 mm/kasan/report.c:588

strlen+0x7d/0xa0 lib/string.c:418

__fortify_strlen include/linux/fortify-string.h:210 [inline]

in4_pton+0xa3/0x3f0 net/core/utils.c:130

bond_o

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References