linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array o...
CVE-2024-46859 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-46859, released September 27, 2024. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SINF array is big enough. Not all panasonic laptops have this many SINF array entries, for example the Toughbook CF-18 model only has 10 SINF array entries. So it only supports the AC+DC brightness entries and mute. Check that the SINF array has a minimum size which covers all AC+DC brightness entries and refuse to load if the SINF array is smaller. For higher SINF indexes hide the sysfs attributes when the SINF array does not contain an entry for that attribute, avoiding show()/store() accessing the array out of bounds and add bounds checking to the probe() and resume() code accessing these.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| bpftool · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-64kb · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-azure · opensuse-leap 15.6 | 6.4.0-150600.8.17.2 | SUSE-SU-2024:3984-1 | Nov 13, 2024 |
| kernel-azure · sles 15.6 | 6.4.0-150600.8.17.2 | SUSE-SU-2024:3984-1 | Nov 13, 2024 |
| kernel-coco · sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | SUSE-SU-2024:4387-1 | Dec 19, 2024 |
| kernel-coco_debug · sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | SUSE-SU-2024:4387-1 | Dec 19, 2024 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-livepatch-SLE15-SP6-RT_Update_5 · sles 15.6 | 1-150600.1.3.1 | SUSE-SU-2024:3986-1 | Nov 13, 2024 |
| kernel-livepatch-SLE15-SP6_Update_6 · sles 15.6 | 1-150600.13.3.5 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-rt · opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | SUSE-SU-2024:3986-1 | Nov 13, 2024 |
| kernel-rt_debug · opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | SUSE-SU-2024:3986-1 | Nov 13, 2024 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-source-azure · opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | SUSE-SU-2024:3984-1 | Nov 13, 2024 |
| kernel-source-azure · sles 15.6 | 6.4.0-150600.8.17.1 | SUSE-SU-2024:3984-1 | Nov 13, 2024 |
| kernel-source-coco · sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | SUSE-SU-2024:4387-1 | Dec 19, 2024 |
| kernel-source-rt · opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | SUSE-SU-2024:3986-1 | Nov 13, 2024 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-syms-azure · opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | SUSE-SU-2024:3984-1 | Nov 13, 2024 |
| kernel-syms-azure · sles 15.6 | 6.4.0-150600.8.17.1 | SUSE-SU-2024:3984-1 | Nov 13, 2024 |
| kernel-syms-coco · sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | SUSE-SU-2024:4387-1 | Dec 19, 2024 |
| kernel-syms-rt · opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | SUSE-SU-2024:3986-1 | Nov 13, 2024 |
| kernel-uek · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-container · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-container · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-container-debug · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-container-debug · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-core · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-core · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-core · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-core · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-devel · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-devel · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-modules · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-modules · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-modules-extra · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-debug-modules-extra · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-devel · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-devel · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-doc · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-doc · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-modules · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-modules · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-modules-extra · ol 8 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-uek-modules-extra · ol 9 | 0:5.15.0-303.171.5.2.el9uek | ELSA-2024-12887 | Dec 18, 2024 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| kernel-zfcpdump · sles 15.6 | 6.4.0-150600.23.30.1 | SUSE-SU-2024:4318-1 | Dec 13, 2024 |
| linux · Debian 12.15 (bookworm) | 6.1.112-1 | DEBIAN-CVE-2024-46859 | Sep 27, 2024 |
| linux · Debian 13.5 (trixie) | 6.10.11-1 | DEBIAN-CVE-2024-46859 | Sep 27, 2024 |
| linux · Debian 14 | 6.10.11-1 | DEBIAN-CVE-2024-46859 | Sep 27, 2024 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.