Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2024-40978

7.1 · HIGH

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directl…

Published Jul 12, 2024CWE-125EPSS 0.32%

Overview

CVE-2024-40978 is a high-severity vulnerability. It was published on July 12, 2024 and has a CVSS 3.1 base score of 7.1 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.1, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedi: Fix crash while reading debugfs attribute

The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly

on a __user pointer, which results into the crash.

To fix this issue, use a small local stack buffer for sprintf() and then

call simple_read_from_buffer(), which in turns make the copy_to_user()

call.

BUG: unable to handle page fault for address: 00007f4801111000

PGD 8000000864df6067 P4D 8000000864df6067 PUD 864df7067 PMD 846028067 PTE 0

Oops: 0002 [#1] PREEMPT SMP PTI

Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 06/15/2023

RIP: 0010:memcpy_orig+0xcd/0x130

RSP: 0018:ffffb7a18c3ffc40 EFLAGS: 00010202

RAX: 00007f4801111000 RBX: 00007f4801111000 RCX: 000000000000000f

RDX: 000000000000000f RSI: ffffffffc0bfd7a0 RDI: 00007f4801111000

RBP: ffffffffc0bfd7a0 R08: 725f746f6e5f6f64 R09: 3d7265766f636572

R10: ffffb7a18c3ffd08 R11: 0000000000000000 R12: 00007f4881110fff

R13:

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/144d76a676b630e321556965011b00e2de0b40a7Refgit.kernel.org/stable/c/21c963de2e86e88f6a8ca556bcebb8e62ab8e901Refgit.kernel.org/stable/c/28027ec8e32ecbadcd67623edb290dad61e735b5Refgit.kernel.org/stable/c/397a8990c377ee4b61d6df768e61dff9e316d46bRefgit.kernel.org/stable/c/56bec63a7fc87ad50b3373a87517dc9770eef9e0Refgit.kernel.org/stable/c/e2f433ea7d0ff77998766a088a287337fb43ad75Refgit.kernel.org/stable/c/eaddb86637669f6bad89245ee63f8fb2bfb50241Refgit.kernel.org/stable/c/fa85b016a56b9775a3fe41e5d26e666945963b46Refgit.kernel.org/stable/c/144d76a676b630e321556965011b00e2de0b40a7Refgit.kernel.org/stable/c/21c963de2e86e88f6a8ca556bcebb8e62ab8e901

How CyberStrike helps

Frequently asked questions

What is CVE-2024-40978?

CVE-2024-40978 is a high-severity vulnerability. It was published on July 12, 2024 and has a CVSS 3.1 base score of 7.1 (HIGH).

How severe is CVE-2024-40978?

This vulnerability has a CVSS 3.1 base score of 7.1, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-40978?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2024-40978?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2024-40978 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2024

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999