CVE-2024-56662

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The issue occurs in the cmd to func function when the call pkg->nd reserved2 array is accessed without verifying that call pkg points to a buffer that is appropriately sized as a struct nd cmd pkg. This can lead to out-of-bounds access and undefined behavior if the buffer does not have sufficient space. A check was added in acpi nfit ctl() to ensure that buf is not NULL and that buf len is less than sizeof(*call pkg) before accessing it.

Recommendations To address this issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider restricting access to the acpi nfit ctl() function until a patch is available. Additionally, ensure that the buf is not NULL and that buf len is less than sizeof(*call pkg) before accessing the call pkg->nd reserved2 array.