Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-50074

parport: Proper fix for array out-of-bounds access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds accesses replaced sprintf() calls blindly with snprintf(). However, since snprintf() returns the would-be-printed size, not the actually output size, the length calculation can still go over the given limit. Use scnprintf() instead of snprintf(), which returns the actually output letters, for addressing the potential out-of-bounds access properly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 166a0bddcc27de41fe13f861c8348e8e53e988c8 to < 8aadef73ba3b325704ed5cfc4696a25c350182cfaffected
  • 47b3dce100778001cd76f7e9188944b5cb27a76d to < b0641e53e6cb937487b6cfb15772374f0ba149b3affected
  • a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0 to < 1826b6d69bbb7f9ae8711827facbb2ad7f8d0aaaaffected
  • c719b393374d3763e64900ee19aaed767d5a08d6 to < 440311903231c6e6c9bcf8acb6a2885a422e00bcaffected
  • 7f4da759092a1a6ce35fb085182d02de8cc4cc84 to < fca048f222ce9dcbde5708ba2bf81d85a4a27952affected
  • b579ea3516c371ecf59d073772bc45dfd28c8a0e to < 66029078fee00646e2e9dbb8f41ff7819f8e7569affected
  • ab11dac93d2d568d151b1918d7b84c2d02bacbd5 to < 2a8b26a09c8e3ea03da1ef3cd0ef6b96e559fba6affected
  • ab11dac93d2d568d151b1918d7b84c2d02bacbd5 to < 02ac3a9ef3a18b58d8f3ea2b6e46de657bf6c4f9affected
  • 7789a1d6792af410aa9b39a1eb237ed24fa2170aaffected
  • 4.19.320 to < 4.19.323affected
  • 5.4.282 to < 5.4.285affected
  • 5.10.224 to < 5.10.228affected
  • 5.15.165 to < 5.15.169affected
  • 6.1.103 to < 6.1.114affected
  • 6.6.44 to < 6.6.58affected
  • 6.10.3 to < 6.11affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 4.19.323 to ≤ 4.19.*unaffected
  • 5.4.285 to ≤ 5.4.*unaffected
  • 5.10.228 to ≤ 5.10.*unaffected
  • 5.15.169 to ≤ 5.15.*unaffected
  • 6.1.114 to ≤ 6.1.*unaffected
  • 6.6.58 to ≤ 6.6.*unaffected
  • 6.11.5 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References