FreeBSD SA-24:11: ctl(4) Memory Safety Vulnerabilities (CVE-2024-8178, etc.)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: FreeBSD-SA-24:11 2. Affected Component: ctl(4) CAM Target Layer 3. Affected Versions: All supported FreeBSD versions 4. Fix Timestamps: - 2024-09-04 15:51:07 UTC (stable/14, 14.1-STABLE) - 2024-09-04 21:07:33 UTC (relen/14.1, 14.1-RELEASE-p4) - 2024-09-04 20:54:18 UTC (relen/14.0, 14.0-RELEASE-p10) - 2024-09-04 15:53:53 UTC (stable/13, 13.4-STABLE) - 2024-09-04 19:58:25 UTC (relen/13.4, 13.4-RC2-p1) - 2024-09-04 20:29:45 UTC (relen/13.3, 13.3-RELEASE-p6) 5. CVE IDs: CVE-2024-8178, CVE-2024-42416, CVE-2024-43110, CVE-2024-45063 6. Issue Description: - Functions and do not properly initialize memory, leading to Use-After-Free vulnerabilities. - Function does not properly validate fields provided by userspace, allowing arbitrary writes to limited kernel helper memory. - Function does not properly handle fields provided by userspace, potentially causing a kernel heap overflow. 7. Impact: - Malicious software can exploit these vulnerabilities in a guest VM exposing to execute code in the host's userspace process. - Malicious iSCSI initiators can achieve remote code execution on iSCSI target hosts. 8. Solution: - Upgrade to the stable or security branch (relen) of the affected system. - Execute one of the following commands: 1. Use the tool to update the system. 2. Download and apply the source code patch. 9. Fix Details: - Corresponding Git commit hashes were applied in various stable and security branches. This information helps users understand the severity, scope of impact, and how to remediate and prevent the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

FreeBSD SA-24:11: ctl(4) Memory Safety Vulnerabilities (CVE-2024-8178, etc.)