PT-2024-8929 · Linux+9 · Linux Kernel+9
Sergey Shtylyov
·
Published
2024-05-08
·
Updated
2026-05-26
·
CVE-2024-38541
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to a buffer overflow in the
of modalias() function. If the buffer is too small, the len parameter becomes negative, and the str parameter points beyond the buffer's end. This can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability is resolved by adding a buffer overflow check after the first snprintf() call and fixing the check after the strlen() call.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu