Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-36934

bna: ensure the copied buf is NUL terminated

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < bd502ba81cd1d515deddad7dbc6b812b14b97147affected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < 80578ec10335bc15ac35fd1703c22aab34e39fddaffected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < 6f0f19b79c085cc891c418b768f26f7004bd51a4affected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < 0f560240b4cc25d3de527deb257cdf072c0102a9affected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < 06cb37e2ba6441888f24566a997481d4197b4e32affected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < e19478763154674c084defc62ae0d64d79657f91affected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < 1518b2b498a0109eb6b15755169d3b6607356b35affected
  • 7afc5dbde09104b023ce04465ba71aaba0fc4346 to < 8c34096c7fdf272fd4c0c37fe411cd2e3ed0ee9faffected

Linux Linux

Default version status: affected

  • 3.3affected
  • 0 to < 3.3unaffected
  • 4.19.314 to ≤ 4.19.*unaffected
  • 5.4.276 to ≤ 5.4.*unaffected
  • 5.10.217 to ≤ 5.10.*unaffected
  • 5.15.159 to ≤ 5.15.*unaffected
  • 6.1.91 to ≤ 6.1.*unaffected
  • 6.6.31 to ≤ 6.6.*unaffected
  • 6.8.10 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References