Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-50131

tracing: Consider the NULL character when validating the event length

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character. This commit checks this condition and returns failure for it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 5e3231b352725ff4a3a0095e6035af674f2d8725affected
  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 02874ca52df2ca2423ba6122039315ed61c25972affected
  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < b86b0d6eea204116e4185acc35041ca4ff11a642affected
  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < f4ed40d1c669bba1a54407d8182acdc405683f29affected
  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < a14a075a14af8d622c576145455702591bdde09daffected
  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 5fd942598ddeed9a212d1ff41f9f5b47bcc990a7affected
  • dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 0b6e2e22cb23105fcb171ab92f0f7516c69c8471affected

Linux Linux

Default version status: affected

  • 5.1affected
  • 0 to < 5.1unaffected
  • 5.4.285 to ≤ 5.4.*unaffected
  • 5.10.229 to ≤ 5.10.*unaffected
  • 5.15.170 to ≤ 5.15.*unaffected
  • 6.1.115 to ≤ 6.1.*unaffected
  • 6.6.59 to ≤ 6.6.*unaffected
  • 6.11.6 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References