PT-2025-8819 · Linux+7 · Linux Kernel+7

Published

2024-12-18

·

Updated

2026-04-20

·

CVE-2024-54456

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential buffer overflow issue has been identified in the Linux kernel, specifically in the nfs sysfs link rpc client() function. The issue arises from the use of strcat() with a char array of size 64, where the size of clnt->cl program->name remains unknown, potentially leading to a buffer overflow. This issue is resolved by replacing strcat() with strscpy() and strncat() to prevent potential buffer overflows.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119CWE-787CWE-120

Related Identifiers

ALSA-2025:20095
ALSA-2025:20518
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALSA-2025_18281
ALSA-2025_19102
ALSA-2025_19103
ALSA-2025_19409
ALSA-2025_20518
BDU:2026-03121
CVE-2024-54456
ECHO-802E-A7FE-8365
INFSA-2025_20518
OESA-2025-1285
OESA-2025-1286
RHSA-2025:20095
RHSA-2025:20518
RHSA-2025_20518
RHSA-2026:2352
USN-7521-1
USN-7521-2
USN-7521-3
USN-7703-1
USN-7703-2
USN-7703-3
USN-7703-4
USN-7719-1
USN-7737-1

Affected Products

Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Ubuntu