In the Linux kernel, the following vulnerability has been resolved:
s390/cio: Ensure the copied buf is NUL terminated
Currently, we allocate a lbuf-sized kernel buffer and copy lbuf from
userspace to that buffer. Later, we use scanf on this buffer but we don't
ensure that the string is terminated inside the buffer, this can lead to
OOB read when using scanf. Fix this issue by using memdup_user_nul instead.
References
Configurations
Configuration 1 (hide)
|
History
15 Jan 2025, 18:39
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CWE | CWE-125 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| References | () https://git.kernel.org/stable/c/c9d48ce163305595ae20aee27774192476d5e6a5 - Patch | |
| References | () https://git.kernel.org/stable/c/06759ebaf75c19c87b2453a5e130e9e61e9b5d65 - Patch | |
| References | () https://git.kernel.org/stable/c/84b38f48836662c4bfae646c014f4e981e16a2b2 - Patch | |
| References | () https://git.kernel.org/stable/c/da7c622cddd4fe36be69ca61e8c42e43cde94784 - Patch | |
| References | () https://git.kernel.org/stable/c/10452edd175fcc4fd0f5ac782ed2a002e3e5d65c - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:* |
30 May 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-30 16:15
Updated : 2025-01-15 18:39
NVD link : CVE-2024-36931
Mitre link : CVE-2024-36931
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-125
Out-of-bounds Read