Raw Data Copy Vulnerability in Linux Kernel

CVE-2024-46740

What is CVE-2024-46740?

A vulnerability in the Linux kernel related to binder objects has been identified, arising from improper handling of raw data during transactions. When copying individual binder objects into the target buffer, there is a lack of out-of-bounds checks that allows raw data exceeding the designated area to overwrite critical offsets. This overwriting can corrupt the offsets that are essential for correctly managing the objects involved in the transaction. As a result, when the system attempts to unwind these corrupted objects, it may lead to unexpected behavior, including the release of nodes that should still be in use. This premature release can trigger dangling pointers and cause subsequent access violations, significantly compromising system stability and security.

References