CVE-2024-0102

What it actually does

Out-of-bounds read in nvdisasm when processing a malformed ELF file, resulting in denial of service.

Why it matters to the business

Potential service disruption for systems using the affected package on AlmaLinux 8; low exploit likelihood but still requires patching within normal maintenance windows.

How an attack unfolds

An attacker crafts a malformed ELF file and tricks a user into invoking nvdisasm on it, triggering the out-of-bounds read and causing a crash.

How to fix it

Upgrade lsof on AlmaLinux 8 to version 4.93.2-1.el8 or later; verify the update via package manager and restart any dependent processes.

How to confirm the fix worked

Confirm the installed package version is at or above 4.93.2-1.el8 using the system package manager and test nvdisasm against known-good ELF files.

Typical attack path

1. Craft a malformed ELF file that triggers the out-of-bounds read
2. Deliver the file to the target via email, download link, or shared storage
3. Convince the user to run nvdisasm against the file
4. Observe denial-of-service crash

How to detect it

Review system logs and package history for unexpected nvdisasm or lsof crashes; look for recent invocations of nvdisasm on untrusted files.

What your security team should do

• Apply the fixed package version immediately on all AlmaLinux 8 systems
• Scan for any custom builds or containers that bundle the vulnerable component
• Monitor for future updates from NVIDIA and AlmaLinux