CVE-2024-58010

In the Linux kernel, the following vulnerability has been resolved:

binfmt_flat: Fix integer overflow bug on 32 bit systems

Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit systems the calculation of "full_data" could be wrong.

full_data = data_len + relocs * sizeof(unsigned long);

This vulnerability is rated as having Moderate impact because it requires local execution of an untrusted executable image and is restricted to 32-bit architectures, limiting the blast radius to a system crash without remote exposure. Furthermore, Red Hat Enterprise Linux is not affected as support for the FLAT binary format is disabled across all supported releases and is intended exclusively for embedded architectures without memory management units.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.