PT-2024-9000 · Linux+5 · Linux Kernel+5

Bui Quang Minh · Published 2024-04-25 · Updated 2025-05-13 · CVE-2024-36934

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to errors in reading beyond the buffer memory boundaries in the bna component of the Linux kernel. This can lead to an out-of-bounds (OOB) read when using sscanf. The problem arises because the copied buffer is not ensured to be NUL terminated, which can cause issues when sscanf is used on this buffer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

RCE

Weakness Enumeration

CWE-125

CWE-787

CWE-20

Related Identifiers

BDU:2024-10682

CVE-2024-36934

DLA-3840-1

DLA-3843-1

DSA-5703-1

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-1736

OESA-2024-2124

OESA-2024-2126

OESA-2024-2153

OESA-2024-2258

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

SUSE-SU-2024:2360-1

SUSE-SU-2024:2372-1

SUSE-SU-2024:2381-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2561-1

SUSE-SU-2024:2571-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6949-1

USN-6949-2

USN-6950-1

USN-6950-2

USN-6950-3

USN-6950-4

USN-6951-1

USN-6951-2

USN-6951-3

USN-6951-4

USN-6952-1

USN-6952-2

USN-6953-1

USN-6955-1

USN-6956-1

USN-6957-1

USN-6979-1

USN-7019-1

USN-7496-1

USN-7496-2

USN-7496-3

USN-7496-4

USN-7496-5

USN-7506-1

USN-7506-2

USN-7506-3

USN-7506-4

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3576

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36934.json · Exploit
• https://ubuntu.com/security/CVE-2024-36891 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5703-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://git.kernel.org/stable/c/8c34096c7fdf272fd4c0c37fe411cd2e3ed0ee9f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-43884 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43826 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-12571.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35858 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6949-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44988 · Security Note
• https://ubuntu.com/security/notices/USN-6951-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36489 · Vendor Advisory