In the Linux kernel, the following vulnerability has been resolved:
firewire: nosy: ensure user_length is taken into account when fetching packet contents
Ensure that packetbufferget respects the userlength provided. If the length of the head packet exceeds the userlength, packetbufferget will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-0eb893e7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67f34f093c0f7bf33f5b4ae64d3d695a3b978285",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-28c5aaa2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38762a0763c10c24a4915feee722d7aa6e73eb98",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-5b68dc1a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-5e1e0b2e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ee0941da10e8fdcdb34756b877efd3282594c1f",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-6d035ba0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38762a0763c10c24a4915feee722d7aa6e73eb98",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-73c8178d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca330c59c54207567a648357835f59df9a286bb",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-7a2d041b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-86265bd7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ee0941da10e8fdcdb34756b877efd3282594c1f",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-a20d8160",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca330c59c54207567a648357835f59df9a286bb",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-a56465aa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fe60ee709436550f8cfbab01295936b868d5baa",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-bc084446",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67f34f093c0f7bf33f5b4ae64d3d695a3b978285",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-c016da6f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fe60ee709436550f8cfbab01295936b868d5baa",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
],
"threshold": 0.9
},
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-df475f40",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f988d3ffc1aa778fc5181bdfab312e57956c6b",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "323189255668146944695009152335961261604",
"length": 885.0
},
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-e61ca40b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f988d3ffc1aa778fc5181bdfab312e57956c6b",
"signature_type": "Function"
}
]