Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-36957

octeontx2-af: avoid off-by-one read from userspace

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: avoid off-by-one read from userspace We try to access count + 1 byte from userspace with memdup_user(buffer, count + 1). However, the userspace only provides buffer of count bytes and only these count bytes are verified to be okay to access. To ensure the copied buffer is NUL terminated, we use memdup_user_nul instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dae49384d0d7695540e2d75168f323cef1384810 to < bcdac70adceb44373da204c3c297f2a98e13216eaffected
  • 3a2eb515d1367c0f667b76089a6e727279c688b8 to < ec697fbd38cbe2eef0948b58673b146caa95402faffected
  • 3a2eb515d1367c0f667b76089a6e727279c688b8 to < 8f11fe3ea3fc261640cfc8a5addd838000407c67affected
  • 3a2eb515d1367c0f667b76089a6e727279c688b8 to < 0a0285cee11c7dcc2657bcd456e469958a5009e7affected
  • 3a2eb515d1367c0f667b76089a6e727279c688b8 to < fc3e0076c1f82fe981d321e3a7bad4cbee542c19affected
  • 3a2eb515d1367c0f667b76089a6e727279c688b8 to < f299ee709fb45036454ca11e90cb2810fe771878affected
  • c9a2ed3fdd037314a71e6a6ba5d99a3605f6f9c7affected
  • 5.10.20 to < 5.10.217affected
  • 5.11.3 to < 5.12affected

Linux Linux

Default version status: affected

  • 5.12affected
  • 0 to < 5.12unaffected
  • 5.10.217 to ≤ 5.10.*unaffected
  • 5.15.159 to ≤ 5.15.*unaffected
  • 6.1.91 to ≤ 6.1.*unaffected
  • 6.6.31 to ≤ 6.6.*unaffected
  • 6.8.10 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References