CVE-2024-38541

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38541
In the Linux kernel, the following vulnerability has been resolved: of: module: add buffer overflow check in of_modalias() In of_modalias(), if the buffer happens to be too small even for the 1st snprintf() call, the len parameter will become negative and str parameter (if not NULL initially) will point beyond the buffer's end. Add the buffer overflow check after the 1st snprintf() call and fix such check after the strlen() call (accounting for the terminating NUL char).

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6 Patch
https://git.kernel.org/stable/c/5d59fd637a8af42b211a92b2edb2474325b4d488
https://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252 Patch
https://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a Patch
https://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e Patch
https://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6 Patch
https://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252 Patch
https://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a Patch
https://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

02 May 2025, 07:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/5d59fd637a8af42b211a92b2edb2474325b4d488 -

01 Apr 2025, 18:36

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6 - () https://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6 - Patch
References () https://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252 - () https://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252 - Patch
References () https://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a - () https://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a - Patch
References () https://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e - () https://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e - Patch

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6 - () https://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6 -
References () https://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252 - () https://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252 -
References () https://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a - () https://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a -
References () https://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e - () https://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e -

03 Jul 2024, 02:05

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-120

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: of: módulo: agregar control de desbordamiento del búfer of_modalias() En of_modalias(), si el búfer es demasiado pequeño incluso para la primera llamada a snprintf(), el parámetro len se vuelve negativo y el parámetro str (si no es NULL inicialmente) apuntará más allá del final del búfer. Agregue la verificación de desbordamiento del búfer después de la primera llamada a snprintf() y corrija dicha verificación después de la llamada strlen() (teniendo en cuenta el carácter NUL de terminación).

19 Jun 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-19 14:15

Updated : 2025-05-02 07:15

NVD link : CVE-2024-38541

Mitre link : CVE-2024-38541

CVE.ORG link : CVE-2024-38541

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')