CVE-2024-43839

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-43839
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43839.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-43839
Downstream
Related
Published
2024-08-17T09:21:55Z
Modified
2026-08-12T03:51:32Z
Summary
bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
Details

In the Linux kernel, the following vulnerability has been resolved:

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

To have enough space to write all possible sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since 'bnad->netdev->name' is used there.

For '%d' specifiers, assume that they require:

  • 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8
  • 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX is 16

And replace sprintf with snprintf.

Detected using the static analysis tool - Svace.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43839.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8b230ed8ec96c933047dd0625cf95f739e4939a6
Fixed
f121740f69eda4da2de9a20a6687a13593e72540
Fixed
c90b1cd7758fd4839909e838ae195d19f8065d76
Fixed
6ce46045f9b90d952602e2c0b8886cfadf860bf1
Fixed
6d20c4044ab4d0e6a99aa35853e66f0aed5589e3
Fixed
ab748dd10d8742561f2980fea08ffb4f0cacfdef
Fixed
b0ff0cd0847b03c0a0abe20cfa900eabcfcb9e43
Fixed
e0f48f51d55fb187400e9787192eda09fa200ff5
Fixed
c9741a03dc8e491e57b95fba0058ab46b7e506da

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43839.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.37
Fixed
4.19.320
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.282
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.224
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.165
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.103
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.44
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43839.json"