UBUNTU-CVE-2024-1151
Dashboard / Vulnerabilities / UBUNTU-CVE-2024-1151
UBUNTU-CVE-2024-1151
Summary:
Details: A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.
References: https://ubuntu.com/security/CVE-2024-1151, https://lore.kernel.org/all/[email protected]/, https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=bd128f62c365, https://www.cve.org/CVERecord?id=CVE-2024-1151, https://ubuntu.com/security/notices/USN-6766-1, https://ubuntu.com/security/notices/USN-6766-2, https://ubuntu.com/security/notices/USN-6766-3, https://ubuntu.com/security/notices/USN-6795-1, https://ubuntu.com/security/notices/USN-6828-1, https://ubuntu.com/security/notices/USN-6895-1, https://ubuntu.com/security/notices/USN-6895-2, https://ubuntu.com/security/notices/USN-6900-1, https://ubuntu.com/security/notices/USN-6895-3, https://ubuntu.com/security/notices/USN-6895-4
Affected packages
Package
Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=esm-infra-legacy%2Ftrusty
Affected ranges
Type: ECOSYSTEM
Events:
