Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-36935

ice: ensure the copied buf is NUL terminated

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count bytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 96a9a9341cdaea0c3bce4c134e04a2a42ae899ac to < 5ff4de981983ed84f29b5d92b6550ec054e12a92affected
  • 96a9a9341cdaea0c3bce4c134e04a2a42ae899ac to < 666854ea9cad844f75a068f32812a2d78004914aaffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.8.10 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References