medium 5.5

CVE-2024-1151 json

Kernel: stack overflow problem in open vswitch kernel module leading to dos

published 2024-02-11 2 y ago modified 2026-11-05 4 d ago also EUVD-2024-16920

cvss: 5.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 19%
public exploits: 0; none known

A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this can lead to a crash or other related issues.

Patch / fix

fixed in 2 distros 5 links 1

Red Hat Red Hat Enterprise Linux 9 0:5.14.0-503.11.1.el9_5
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support 0:5.14.0-284.75.1.el9_2, 0:5.14.0-284.75.1.rt14.360.el9_2

debian ubuntu red hat suse azure linux

linux Debian 12 6.1.82-1
linux Debian 14, Debian 13 6.7.7-1

debian advisories DEBIAN-CVE-2024-1151

linux Ubuntu 22.04 LTS 5.15.0-106.116
linux-aws Ubuntu 22.04 LTS 5.15.0-1061.67
linux-gcp Ubuntu 22.04 LTS 5.15.0-1059.67
linux-gke Ubuntu 22.04 LTS 5.15.0-1058.63
linux-ibm Ubuntu 22.04 LTS 5.15.0-1054.57
linux-kvm Ubuntu 22.04 LTS 5.15.0-1058.63
linux-azure Ubuntu 22.04 LTS 5.15.0-1063.72
linux-gkeop Ubuntu 22.04 LTS 5.15.0-1044.51

ubuntu advisories UBUNTU-CVE-2024-1151

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

kernel RHEL 9 5.14.0-503.11.1.el9_5
rv RHEL 9 5.14.0-503.11.1.el9_5
perf RHEL 9 5.14.0-503.11.1.el9_5
rtla RHEL 9 5.14.0-503.11.1.el9_5
bpftool RHEL 9 7.4.0-503.11.1.el9_5
libperf RHEL 9 5.14.0-503.11.1.el9_5
kernel-rt RHEL 9 5.14.0-503.11.1.el9_5
kernel-64k RHEL 9 5.14.0-503.11.1.el9_5

red hat advisories RHSA-2024:9315 RHSA-2024:4823 RHSA-2024:4831

kernel-rt SLE Micro 5.4, SLE Micro 5.3, openSUSE Leap Micro 5.4 +1 more 5.14.21-150400.15.71.1
kernel-source-rt SLE Micro 5.4, SLE Micro 5.3 5.14.21-150400.15.71.1
kernel-rt SLE Real Time 12 SP5 4.12.14-10.171.1
kernel-syms-rt SLE Real Time 12 SP5 4.12.14-10.171.1
kernel-rt_debug SLE Real Time 12 SP5 4.12.14-10.171.1
kernel-source-rt SLE Real Time 12 SP5 4.12.14-10.171.1
kernel-azure SLES for SAP 12 SP5, SLES 12 SP5 4.12.14-16.173.1
kernel-syms-azure SLES for SAP 12 SP5, SLES 12 SP5 4.12.14-16.173.1

suse advisories SUSE-SU-2024:0977-1 SUSE-SU-2024:0976-1 SUSE-SU-2024:0975-1 SUSE-SU-2024:0926-1 SUSE-SU-2024:0925-1 SUSE-SU-2024:0910-1

hyperv-daemons Azure Linux 3.0 6.6.22.1-2

azure linux advisories AZL-35477

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

lore.kernel.org/all/20240207132416.1488485-1-aconole@redhat.com/ patch

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-1151 updated 2026-11-05 cvss 5.5

kernel: stack overflow problem in Open vSwitch kernel module leading to DoS

Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 kernel-rt, kernel-rt-kvm, kernel-rt-core, kernel-rt-modules, kernel-rt-debug-kvm, kernel-rt-debug-core, +12 more
affected: workaround, no fix available
Red Hat CodeReady Linux Builder (v. 9) libperf 5.14.0-503.11.1.el9_5, kernel-debuginfo-common-s390x 5.14.0-503.11.1.el9_5, kernel-debuginfo-common-x86_64 5.14.0-503.11.1.el9_5, kernel-debuginfo-common-aarch64 5.14.0-503.11.1.el9_5, kernel-debuginfo-common-ppc64le 5.14.0-503.11.1.el9_5
fixed: vendor fix RHSA-2024:9315
Red Hat CodeReady Linux Builder EUS (v.9.2) kernel-debuginfo-common-s390x 5.14.0-284.75.1.el9_2, kernel-debuginfo-common-x86_64 5.14.0-284.75.1.el9_2, kernel-debuginfo-common-aarch64 5.14.0-284.75.1.el9_2, kernel-debuginfo-common-ppc64le 5.14.0-284.75.1.el9_2
fixed: vendor fix RHSA-2024:4823
Red Hat Enterprise Linux AppStream (v. 9) rv 5.14.0-503.11.1.el9_5, perf 5.14.0-503.11.1.el9_5, rtla 5.14.0-503.11.1.el9_5, kernel-devel-matched 5.14.0-503.11.1.el9_5, kernel-64k-devel-matched 5.14.0-503.11.1.el9_5, kernel-debug-devel-matched 5.14.0-503.11.1.el9_5, +6 more
fixed: vendor fix RHSA-2024:9315
Red Hat Enterprise Linux AppStream EUS (v.9.2) perf 5.14.0-284.75.1.el9_2, rtla 5.14.0-284.75.1.el9_2, kernel-devel-matched 5.14.0-284.75.1.el9_2, kernel-64k-devel-matched 5.14.0-284.75.1.el9_2, kernel-debug-devel-matched 5.14.0-284.75.1.el9_2, kernel-debuginfo-common-s390x 5.14.0-284.75.1.el9_2, +5 more
fixed: vendor fix RHSA-2024:4823
Red Hat Enterprise Linux BaseOS (v. 9) bpftool 7.4.0-503.11.1.el9_5, kernel 5.14.0-503.11.1.el9_5, kernel-64k 5.14.0-503.11.1.el9_5, kernel-core 5.14.0-503.11.1.el9_5, kernel-tools 5.14.0-503.11.1.el9_5, python3-perf 5.14.0-503.11.1.el9_5, +29 more
fixed: vendor fix RHSA-2024:9315
Red Hat Enterprise Linux BaseOS EUS (v.9.2) bpftool 7.0.0-284.75.1.el9_2, kernel 5.14.0-284.75.1.el9_2, kernel-64k 5.14.0-284.75.1.el9_2, kernel-core 5.14.0-284.75.1.el9_2, kernel-tools 5.14.0-284.75.1.el9_2, python3-perf 5.14.0-284.75.1.el9_2, +28 more
fixed: vendor fix RHSA-2024:4823
Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-503.11.1.el9_5, kernel-rt-core 5.14.0-503.11.1.el9_5, kernel-rt-modules 5.14.0-503.11.1.el9_5, kernel-rt-debug-core 5.14.0-503.11.1.el9_5, kernel-rt-modules-core 5.14.0-503.11.1.el9_5, kernel-rt-debug-modules 5.14.0-503.11.1.el9_5, +4 more
fixed: vendor fix RHSA-2024:9315

show 4 more

Red Hat Enterprise Linux Real Time EUS (v.9.2) kernel-rt 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-core 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-modules 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-debug-core 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-modules-core 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-debug-modules 5.14.0-284.75.1.rt14.360.el9_2, +4 more
fixed: vendor fix RHSA-2024:4831
Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-503.11.1.el9_5, kernel-rt-kvm 5.14.0-503.11.1.el9_5, kernel-rt-core 5.14.0-503.11.1.el9_5, kernel-rt-modules 5.14.0-503.11.1.el9_5, kernel-rt-debug-kvm 5.14.0-503.11.1.el9_5, kernel-rt-debug-core 5.14.0-503.11.1.el9_5, +6 more
fixed: vendor fix RHSA-2024:9315
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.2) kernel-rt 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-kvm 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-core 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-modules 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-debug-kvm 5.14.0-284.75.1.rt14.360.el9_2, kernel-rt-debug-core 5.14.0-284.75.1.rt14.360.el9_2, +6 more
fixed: vendor fix RHSA-2024:4831
Red Hat CodeReady Linux Builder (v. 9) kernel-cross-headers 5.14.0-503.11.1.el9_5 Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux AppStream (v. 9) kernel-headers 5.14.0-503.11.1.el9_5 Red Hat Enterprise Linux AppStream EUS (v.9.2) kernel-doc 5.14.0-284.75.1.el9_2
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-02-12)

Exploit prediction

0.27% chance of exploitation in the next 30 days, higher than 19% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Red Hat Red Hat Enterprise Linux 9
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8

Classification

Weakness

CWE-121 Stack-based Buffer Overflow
CWE-787 Out-of-bounds Write

Technology feeds

Linux kernel rss critical rss

References

lore.kernel.org /all/20240207132416.1488485-1-aconole@redhat.com/
patch
access.redhat.com /errata/RHSA-2024:4823
vendor-advisory, issue-tracking
access.redhat.com /errata/RHSA-2024:4831
vendor-advisory, issue-tracking
access.redhat.com /errata/RHSA-2024:9315
vendor-advisory
access.redhat.com /security/cve/CVE-2024-1151
vdb-entry, third-party-advisory
bugzilla.redhat.com /show_bug.cgi?id=2262241
issue-tracking, third-party-advisory
lists.debian.org /debian-lts-announce/2024/06/msg00017.html
lists.fedoraproject.org /archives/list/package-announce@lists.fedoraproject.org/message/3LZROQAX7Q7LEP4F7WQ3KUZKWCZGFFP2/
lists.fedoraproject.org /archives/list/package-announce@lists.fedoraproject.org/message/GS7S3XLTLOUKBXV67LLFZWB3YVFJZHRK/

Sources

CVE List CVE-2024-1151
NVD CVE-2024-1151

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary