Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-38577
HistoryJun 19, 2024 - 1:37 p.m.

CVE-2024-38577 rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow

2024-06-1913:37:35
Linux
github.com
3
linux kernel
buffer overflow
cve-2024-38577
fix
snprintf

AI Score

7.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow

There is a possibility of buffer overflow in
show_rcu_tasks_trace_gp_kthread() if counters, passed
to sprintf() are huge. Counter numbers, needed for this
are unrealistically high, but buffer overflow is still
possible.

Use snprintf() with buffer size instead of sprintf().

Found by Linux Verification Center (linuxtesting.org) with SVACE.

AI Score

7.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial