CVE-2024-46859

A flaw was found in the Linux kernel's panasonic-laptop driver. This vulnerability allows a privileged local attacker to cause an out-of-bounds access in the SINF array. The driver fails to adequately check the size of the SINF array before accessing its entries, which can lead to system instability or a denial of service (DoS). This issue affects specific Panasonic laptop models where the SINF array has fewer entries than expected.

Access to this OOB scenario is a privileged operation (/drivers/platform/x86/) hence it is considered a moderate impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To prevent the panasonic-laptop kernel module from loading, create a modprobe configuration file.

echo "blacklist panasonic-laptop" > /etc/modprobe.d/disable-panasonic-laptop.conf

A system reboot is required for this change to take effect. Disabling this module may impact functionality related to specific Panasonic laptop features.