Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-54456

NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() name is char[64] where the size of clnt->cl_program->name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e13b549319a684dd80c4cc25e9567a5c84007e32 to < 19b3ca651b4b473878c73539febe477905041442affected
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to < dd8830779b77f4d1206d28d02ad56a03fc0e78f7affected
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to < e8e0eb5601d4a6c74c336e3710afe3a0348c469daffected
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to < 49fd4e34751e90e6df009b70cd0659dc839e7ca8affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.79 to ≤ 6.6.*unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References