In the Linux kernel, the following vulnerability has been resolved:
dev/parport: fix the array out-of-bounds risk
Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, ensuring the destination buffer is not overflowed.
Below is the stack trace I encountered during the actual issue:
[ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: dohardwarebaseaddr+0xcc/0xd0 [parport] [ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm: QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2 [ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp [ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024 [ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace: [ 66.575469s] [pid:5118,cpu4,QThread,9] dumpbacktrace+0x0/0x1c0 [ 66.575469s] [pid:5118,cpu4,QThread,0] showstack+0x14/0x20 [ 66.575469s] [pid:5118,cpu4,QThread,1] dumpstack+0xd4/0x10c [ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc [ 66.575500s] [pid:5118,cpu4,QThread,3] _stackchkfail+0x2c/0x38 [ 66.575500s] [pid:5118,cpu4,QThread,4] dohardwarebaseaddr+0xcc/0xd0 [parport]
[
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"248155218961528480125540441881453443722",
"50547853602987267244052400125977506041",
"164433591071733058616543299238494669690",
"94302721257692627599424880129959864137",
"131857521715368354789297868248840726754",
"286558693468499898971808982569992580084",
"259947159260601275873770969744503157365",
"242588963939871232882786966761354082708",
"260271285356808768617894923798609598898",
"129673601792970547948701766989081229280",
"286051107547820771268708162077278249228",
"144257004751947742175650828063907571683",
"205852382717085598477226226547224947533",
"212668842289214474119305000303171813922",
"232268901887791330131994600139761402594",
"102524202157861253118503590227997793401",
"224278884300382968000928624573857986420",
"123268508695402656492580753739259730937",
"264117875851738331333786643936171987290",
"191863766719575493127033935308429759521",
"288027775544203210988318761794315606392",
"230771974282264162935849693825816790527",
"206375316825154852515266536944962311635",
"8644615417589816063151310554778456901",
"6438969418459173494923908704518954997",
"200540250947705444094432173943336936403",
"39551307429350694296118339344746261357",
"309395411165617481373669267036275370579",
"4575876194816282044191771223028129147",
"324224424329983353605962175471498237075",
"336738355432335749823242239521384814361",
"116011580633333038004039543520131671670",
"174006413562312414419388755084806202542",
"90914222305409908437639136652006960744",
"22577848684590752591480533941298083493",
"6928201527028674292255005024603177840",
"120343429574632368389490658886515276306",
"13083773839000350592726131512240015440",
"118550945296062431575216124046013945007",
"317806454396089379341972830445209185219"
]
},
"id": "CVE-2024-42301-01c14c9c",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_modes"
},
"digest": {
"function_hash": "4714670044628454707892113329088217321",
"length": 683.0
},
"id": "CVE-2024-42301-0897609e",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_active_device"
},
"digest": {
"function_hash": "28917380651446385051620086185057028397",
"length": 591.0
},
"id": "CVE-2024-42301-1af17981",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_base_addr"
},
"digest": {
"function_hash": "141557355199953922479299216749210756426",
"length": 450.0
},
"id": "CVE-2024-42301-1b1e8626",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_base_addr"
},
"digest": {
"function_hash": "141557355199953922479299216749210756426",
"length": 450.0
},
"id": "CVE-2024-42301-2a1e2a6d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_dma"
},
"digest": {
"function_hash": "26629314026829695095112761442088980872",
"length": 426.0
},
"id": "CVE-2024-42301-2a83481b",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_dma"
},
"digest": {
"function_hash": "26629314026829695095112761442088980872",
"length": 426.0
},
"id": "CVE-2024-42301-3143d581",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_active_device"
},
"digest": {
"function_hash": "99007526137430952856117728450375334102",
"length": 602.0
},
"id": "CVE-2024-42301-32808359",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_active_device"
},
"digest": {
"function_hash": "28917380651446385051620086185057028397",
"length": 591.0
},
"id": "CVE-2024-42301-3e41560e",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_active_device"
},
"digest": {
"function_hash": "28917380651446385051620086185057028397",
"length": 591.0
},
"id": "CVE-2024-42301-46e8c144",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_base_addr"
},
"digest": {
"function_hash": "141557355199953922479299216749210756426",
"length": 450.0
},
"id": "CVE-2024-42301-53f7edf4",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_dma"
},
"digest": {
"function_hash": "82679914843013990485123494659271577609",
"length": 437.0
},
"id": "CVE-2024-42301-5789132f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_base_addr"
},
"digest": {
"function_hash": "273048008080498904201257173782906633691",
"length": 461.0
},
"id": "CVE-2024-42301-62ae8693",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_modes"
},
"digest": {
"function_hash": "66198620053900891073014754715263696742",
"length": 694.0
},
"id": "CVE-2024-42301-6d7872f0",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_modes"
},
"digest": {
"function_hash": "4714670044628454707892113329088217321",
"length": 683.0
},
"id": "CVE-2024-42301-6f5f3c51",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"248155218961528480125540441881453443722",
"50547853602987267244052400125977506041",
"164433591071733058616543299238494669690",
"94302721257692627599424880129959864137",
"131857521715368354789297868248840726754",
"286558693468499898971808982569992580084",
"259947159260601275873770969744503157365",
"242588963939871232882786966761354082708",
"260271285356808768617894923798609598898",
"129673601792970547948701766989081229280",
"286051107547820771268708162077278249228",
"144257004751947742175650828063907571683",
"205852382717085598477226226547224947533",
"212668842289214474119305000303171813922",
"232268901887791330131994600139761402594",
"102524202157861253118503590227997793401",
"224278884300382968000928624573857986420",
"123268508695402656492580753739259730937",
"264117875851738331333786643936171987290",
"191863766719575493127033935308429759521",
"288027775544203210988318761794315606392",
"230771974282264162935849693825816790527",
"206375316825154852515266536944962311635",
"8644615417589816063151310554778456901",
"6438969418459173494923908704518954997",
"200540250947705444094432173943336936403",
"39551307429350694296118339344746261357",
"309395411165617481373669267036275370579",
"4575876194816282044191771223028129147",
"324224424329983353605962175471498237075",
"336738355432335749823242239521384814361",
"116011580633333038004039543520131671670",
"174006413562312414419388755084806202542",
"90914222305409908437639136652006960744",
"22577848684590752591480533941298083493",
"6928201527028674292255005024603177840",
"120343429574632368389490658886515276306",
"13083773839000350592726131512240015440",
"118550945296062431575216124046013945007",
"317806454396089379341972830445209185219"
]
},
"id": "CVE-2024-42301-7183214b",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_dma"
},
"digest": {
"function_hash": "26629314026829695095112761442088980872",
"length": 426.0
},
"id": "CVE-2024-42301-9317664f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"248155218961528480125540441881453443722",
"50547853602987267244052400125977506041",
"164433591071733058616543299238494669690",
"94302721257692627599424880129959864137",
"131857521715368354789297868248840726754",
"286558693468499898971808982569992580084",
"259947159260601275873770969744503157365",
"242588963939871232882786966761354082708",
"260271285356808768617894923798609598898",
"129673601792970547948701766989081229280",
"286051107547820771268708162077278249228",
"144257004751947742175650828063907571683",
"205852382717085598477226226547224947533",
"212668842289214474119305000303171813922",
"232268901887791330131994600139761402594",
"102524202157861253118503590227997793401",
"224278884300382968000928624573857986420",
"123268508695402656492580753739259730937",
"264117875851738331333786643936171987290",
"191863766719575493127033935308429759521",
"134311464491933052254360624724915684816",
"230771974282264162935849693825816790527",
"206375316825154852515266536944962311635",
"8644615417589816063151310554778456901",
"6438969418459173494923908704518954997",
"200540250947705444094432173943336936403",
"39551307429350694296118339344746261357",
"309395411165617481373669267036275370579",
"4575876194816282044191771223028129147",
"324224424329983353605962175471498237075",
"336738355432335749823242239521384814361",
"116011580633333038004039543520131671670",
"174006413562312414419388755084806202542",
"90914222305409908437639136652006960744",
"22577848684590752591480533941298083493",
"6928201527028674292255005024603177840",
"120343429574632368389490658886515276306",
"13083773839000350592726131512240015440",
"118550945296062431575216124046013945007",
"317806454396089379341972830445209185219"
]
},
"id": "CVE-2024-42301-948becd0",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_autoprobe"
},
"digest": {
"function_hash": "96670236877069035293938203036857636947",
"length": 887.0
},
"id": "CVE-2024-42301-ad1f5987",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_irq"
},
"digest": {
"function_hash": "36235701433486493742692187615689958526",
"length": 437.0
},
"id": "CVE-2024-42301-b14cad39",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@47b3dce100778001cd76f7e9188944b5cb27a76d",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"248155218961528480125540441881453443722",
"50547853602987267244052400125977506041",
"164433591071733058616543299238494669690",
"94302721257692627599424880129959864137",
"131857521715368354789297868248840726754",
"286558693468499898971808982569992580084",
"259947159260601275873770969744503157365",
"242588963939871232882786966761354082708",
"260271285356808768617894923798609598898",
"129673601792970547948701766989081229280",
"286051107547820771268708162077278249228",
"144257004751947742175650828063907571683",
"205852382717085598477226226547224947533",
"212668842289214474119305000303171813922",
"232268901887791330131994600139761402594",
"102524202157861253118503590227997793401",
"224278884300382968000928624573857986420",
"123268508695402656492580753739259730937",
"264117875851738331333786643936171987290",
"191863766719575493127033935308429759521",
"288027775544203210988318761794315606392",
"230771974282264162935849693825816790527",
"206375316825154852515266536944962311635",
"8644615417589816063151310554778456901",
"6438969418459173494923908704518954997",
"200540250947705444094432173943336936403",
"39551307429350694296118339344746261357",
"309395411165617481373669267036275370579",
"4575876194816282044191771223028129147",
"324224424329983353605962175471498237075",
"336738355432335749823242239521384814361",
"116011580633333038004039543520131671670",
"174006413562312414419388755084806202542",
"90914222305409908437639136652006960744",
"22577848684590752591480533941298083493",
"6928201527028674292255005024603177840",
"120343429574632368389490658886515276306",
"13083773839000350592726131512240015440",
"118550945296062431575216124046013945007",
"317806454396089379341972830445209185219"
]
},
"id": "CVE-2024-42301-bdc2e028",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_autoprobe"
},
"digest": {
"function_hash": "158567642242720226551514687844512109828",
"length": 876.0
},
"id": "CVE-2024-42301-db3b50ab",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_autoprobe"
},
"digest": {
"function_hash": "158567642242720226551514687844512109828",
"length": 876.0
},
"id": "CVE-2024-42301-dc417f86",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_irq"
},
"digest": {
"function_hash": "253122988296009901242428681743670126473",
"length": 426.0
},
"id": "CVE-2024-42301-e119629a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_irq"
},
"digest": {
"function_hash": "253122988296009901242428681743670126473",
"length": 426.0
},
"id": "CVE-2024-42301-e823f8e2",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_modes"
},
"digest": {
"function_hash": "4714670044628454707892113329088217321",
"length": 683.0
},
"id": "CVE-2024-42301-eb868d8d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_autoprobe"
},
"digest": {
"function_hash": "158567642242720226551514687844512109828",
"length": 876.0
},
"id": "CVE-2024-42301-faa5f383",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b579ea3516c371ecf59d073772bc45dfd28c8a0e",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "drivers/parport/procfs.c",
"function": "do_hardware_irq"
},
"digest": {
"function_hash": "253122988296009901242428681743670126473",
"length": 426.0
},
"id": "CVE-2024-42301-fb76c033",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f4da759092a1a6ce35fb085182d02de8cc4cc84",
"signature_version": "v1"
}
]