CVE-2024-53681

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-53681

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-53681

Downstream

Related

Published

2025-01-15T13:15:10Z

Modified

2025-01-16T05:00:03Z

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved:

nvmet: Don't overflow subsysnqn

nvmetrootdiscoverynqnstore treats the subsysnqn string like a fixed size buffer, even though it is dynamically allocated to the size of the string.

Create a new string with kstrndup instead of using the old buffer.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.12.9-1

{
    "urgency": "not yet assigned"
}