{"id":"CVE-2024-42265","revision":"3b4048832761416da7594387d5033fd0","records":[{"revision":"3b4048832761416da7594387d5033fd0","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-42265","aliases":[],"title":"protect the fetch of ->fd[fd] in do_dup2() from mispredictions","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nprotect the fetch of ->fd[fd] in do_dup2() from mispredictions\n\nboth callers have verified that fd is not greater than ->max_fds;\nhowever, misprediction might end up with\n        tofree = fdt->fd[fd];\nbeing speculatively executed.  That's wrong for the same reasons\nwhy it's wrong in close_fd()/file_close_fd_locked(); the same\nsolution applies - array_index_nospec(fd, fdt->max_fds) could differ\nfrom fd only in case of speculative execution on mispredicted path.","state":0,"publishedAt":"2024-08-17T08:54:21.636+00:00","modifiedAt":"2026-10-15T00:48:07.974+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/file.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"ed42e8ff509d2a61c6642d1825032072dab79f26\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"41a6c31df77bd8e050136b0a200b537da9e1084a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"08775b3d6ed117cf4518754ec7300ee42b6a5368\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"3f480493550b6a23d3a65d095d6569d4a7f56a0f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"5db999fff545b924b24c9afd368ef5c17279b176\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"da72e783afd27d9f487836b2e6738146c0edd149\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"1171ceccabfd596ca370c5d2cbb47d110c3f2fe1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8280d16172243702ed43432f826ca6130edb4086\",\n                            \"lessThan\": \"8aa37bde1a7b645816cda8b80df4753ecf172bf1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/file.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.7\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.320\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.282\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.104\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.45\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.4\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/ed42e8ff509d2a61c6642d1825032072dab79f26","https://git.kernel.org/stable/c/41a6c31df77bd8e050136b0a200b537da9e1084a","https://git.kernel.org/stable/c/08775b3d6ed117cf4518754ec7300ee42b6a5368","https://git.kernel.org/stable/c/3f480493550b6a23d3a65d095d6569d4a7f56a0f","https://git.kernel.org/stable/c/5db999fff545b924b24c9afd368ef5c17279b176","https://git.kernel.org/stable/c/da72e783afd27d9f487836b2e6738146c0edd149","https://git.kernel.org/stable/c/1171ceccabfd596ca370c5d2cbb47d110c3f2fe1","https://git.kernel.org/stable/c/8aa37bde1a7b645816cda8b80df4753ecf172bf1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42265","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-42265","identifiers":["CVE-2024-42265"]},"retained":false,"historicalAffected":[]}],"coverage":[]}