← CVE Intelligence

CVE-2024-1151

Kernel: stack overflow problem in open vswitch kernel module leading to dos PUBLISHED

Description (CNA)

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-503.11.1.el9_5 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-503.11.1.el9_5 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.75.1.el9_2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:5.14.0-284.75.1.rt14.360.el9_2 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.