Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2024-46823

kunit/overflow: Fix UB in overflow_allocation_test

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: kunit/overflow: Fix UB in overflow_allocation_test The 'device_name' array doesn't exist out of the 'overflow_allocation_test' function scope. However, it is being used as a driver name when calling 'kunit_driver_create' from 'kunit_device_register'. It produces the kernel panic with KASAN enabled. Since this variable is used in one place only, remove it and pass the device name into kunit_device_register directly as an ascii string.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d03c720e03bd9bf0b784d80b5d3ede7e2daf3b6e to < d1207f07decc66546a7fa463d2f335a856c986efaffected
  • d03c720e03bd9bf0b784d80b5d3ede7e2daf3b6e to < 92e9bac18124682c4b99ede9ee3bcdd68f121e92affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.10.10 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References