Description
In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() This was found by a static analyzer. We should not forget the trailing zero after copy_from_user() if we will further do some string operations, sscanf() in this case. Adding a trailing zero will ensure that the function performs properly.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c6385c0b67c527b298111775bc89a7407ba1581e to < c2150f666c6fc301d5d1643ed0f92251f1a0ff0daffectedc6385c0b67c527b298111775bc89a7407ba1581e to < bcba86e03b3aac361ea671672cf48eed11f9011caffectedc6385c0b67c527b298111775bc89a7407ba1581e to < 6a604877160fe5ab2e1985d5ce1ba6a61abe0693affectedc6385c0b67c527b298111775bc89a7407ba1581e to < 27bd7a742e171362c9eb52ad5d1d71d3321f949faffectedc6385c0b67c527b298111775bc89a7407ba1581e to < 4ce1f56a1eaced2523329bef800d004e30f2f76caffected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.171 to ≤ 5.15.*unaffected6.1.116 to ≤ 6.1.*unaffected6.6.60 to ≤ 6.6.*unaffected6.11.7 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c2150f666c6fc301d5d1643ed0f92251f1a0ff0d ↗
- https://git.kernel.org/stable/c/bcba86e03b3aac361ea671672cf48eed11f9011c ↗
- https://git.kernel.org/stable/c/6a604877160fe5ab2e1985d5ce1ba6a61abe0693 ↗
- https://git.kernel.org/stable/c/27bd7a742e171362c9eb52ad5d1d71d3321f949f ↗
- https://git.kernel.org/stable/c/4ce1f56a1eaced2523329bef800d004e30f2f76c ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗