Linux Kernel Off-By-One Vulnerability in Section Executability Check

A vulnerability in the Linux kernel's handling of section executability has been addressed. The issue was an off-by-one error in the 'is_executable_section' function, which could lead to an out-of-bounds array access. This vulnerability was present in the Linux kernel stable tree.

Impact

The vulnerability could cause out-of-bounds array access, potentially leading to memory corruption or other unintended behavior.

Reproduction

The vulnerability can be reproduced by modifying the 'is_executable_section' function in the 'scripts/mod/modpost.c' file. The original comparison of 'section_index > elf->num_sections' should be changed to 'section_index >= elf->num_sections' to correct the off-by-one error. This modification can be committed to the Linux kernel stable repository.

Remediation

Users can apply the available patch by downloading the latest version of the Linux kernel from the Linux kernel stable Git repository.