Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-53681

nvmet: Don't overflow subsysnqn

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet: Don't overflow subsysnqn nvmet_root_discovery_nqn_store treats the subsysnqn string like a fixed size buffer, even though it is dynamically allocated to the size of the string. Create a new string with kstrndup instead of using the old buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 95409e277d8343810adf8700d29d4329828d452b to < 86645d8d062af3fdcbdaa0a289b95de55bca827daffected
  • 95409e277d8343810adf8700d29d4329828d452b to < 4db3d750ac7e894278ef1cb1c53cc7d883060496affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.12.9 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References