Lucene search

K

LinuxVULNRICHMENT:CVE-2024-38585

HistoryJun 19, 2024 - 1:37 p.m.

CVE-2024-38585 tools/nolibc/stdlib: fix memory error in realloc()

2024-06-1913:37:41

Linux

github.com

2

linux kernel

vulnerability resolved

memory error

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

tools/nolibc/stdlib: fix memory error in realloc()

Pass user_p_len to memcpy() instead of heap->len to prevent realloc()
from copying an extra sizeof(heap) bytes from beyond the allocated
region.

References

git.kernel.org/stable/c/4e6f225aefeb712cdb870176b6621f02cf235b8c

git.kernel.org/stable/c/5996b2b2dac739f2a27da13de8eee5b85b2550b3

git.kernel.org/stable/c/791f4641142e2aced85de082e5783b4fb0b977c2

git.kernel.org/stable/c/8019d3dd921f39a237a9fab6d2ce716bfac0f983

git.kernel.org/stable/c/f678c3c336559cf3255a32153e9a17c1be4e7c15

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-38585

ubuntucve1 nvd1 debiancve1 cve1 redhatcve1 cvelist1 osv6 ubuntu4 nessus5 openvas7 mageia2