Bug#1103277: linux: CVE-2024-38541 for 6.1 branch

Path	csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Hideki Yamane <henrich@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1103277: linux: CVE-2024-38541 for 6.1 branch
Date	Wed, 16 Apr 2025 00:50:01 +0200
Message-ID	<KBXgl-dNPS-1@gated-at.bofh.it> (permalink)
X-Original-To	Debian Bug Tracking System <submit@bugs.debian.org>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Tue Apr 15 22:42:10 2025
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-4.2
Reply-To	Hideki Yamane <henrich@debian.org>, 1103277@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	henrich@debian.org, Debian Kernel Team <debian-kernel@lists.debian.org>
X-Debian-Pr-Message	report 1103277
X-Debian-Pr-Package	src:linux
X-Debian-Pr-Source	linux
Content-Type	multipart/mixed; boundary="===============3686246520965025345=="
MIME-Version	1.0
X-Mailer	reportbug 13.1.0
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1899620
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	87
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Wed, 16 Apr 2025 07:38:54 +0900
X-Original-Message-ID	<174475673466.780068.1015713546824904902.reportbug@t14s>
Xref	csiph.com linux.debian.bugs.dist:1242209 linux.debian.kernel:86907

Cross-posted to 2 groups.

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Source: linux
Version: 6.1.133-1
Severity: normal
X-Debbugs-Cc: henrich@debian.org

Dear Maintainers,

 I've investigated CVE-2024-38541 since I'm running Debian 12 instances
 on AWS and Amazon Inspector alerts it is critical vuln.

 It seems that it is easily applied to 6.1 branch with some modification
 as attached patch. I've already sent it to original author and reviewer
 but not get any reply, so I'm maybe wrong...

 Anyway, could you check it, please?


 Thank you.

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1103277: linux: CVE-2024-38541 for 6.1 branch Hideki Yamane <henrich@debian.org> - 2025-04-16 00:50 +0200
  Bug#1103277: linux: CVE-2024-38541 for 6.1 branch Salvatore Bonaccorso <carnil@debian.org> - 2025-04-16 06:00 +0200
  Bug#1103277: [PATCH 6.1.y] of: module: add buffer overflow check in of_modalias() Uwe Kleine-König <ukleinek@debian.org> - 2025-04-25 16:00 +0200
  Bug#1103277: marked as done (linux: CVE-2024-38541 for 6.1 branch) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-05-07 20:10 +0200

csiph-web