CVE-2024-58010

In the Linux kernel, the following vulnerability has been resolved: binfmt_flat: Fix integer overflow bug on 32 bit systems Most of these sizes and counts are capped at 256MB so the math doesn't result in an integer overflow. The "relocs" count needs to be checked as well. Otherwise on 32bit systems the calculation of "full_data" could be wrong. full_data = data_len + relocs * sizeof(unsigned long);

• CWE-190

• https://git.kernel.org/stable/c/0b6be54d7386b7addbf9e5947366f94aad046938
• https://git.kernel.org/stable/c/55cf2f4b945f6a6416cc2524ba740b83cc9af25aPatch
• https://git.kernel.org/stable/c/6fb98e0576ea155267e206286413dcb3a3d55c12
• https://git.kernel.org/stable/c/8e8cd712bb06a507b26efd2a56155076aa454345Patch
• https://git.kernel.org/stable/c/95506c7f33452450346fbe2975c1359100f854caPatch
• https://git.kernel.org/stable/c/a009378af674b808efcca1e2e67916e79ce866b3Patch
• https://git.kernel.org/stable/c/bc8ca18b8ef4648532c001bd6c8151143b569275
• https://git.kernel.org/stable/c/d17ca8f2dfcf423c439859995910a20e38b86f00Patch
• https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Published

Feb 27, 2025

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-58005In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58006In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58007In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-58008In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58009In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5801Enabled IP Forwarding feature in B&R Automation Runtime vers…5.3
• CVE-2024-58011In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58012In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58013In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-58014In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-58015In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-58016In the Linux kernel, the following vulnerability has been re…5.5