CVE Vulnerabilities

CVE-2024-31335

Operator Precedence Logic Error

Published: Jul 09, 2024 | Modified: Aug 01, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

Weakness

The product uses an expression in which operator precedence causes incorrect logic to be used.

Potential Mitigations

References