Yüksek CVSS 7.1

CVE-2024-42094: Linux Kernel: sınır dışı yazma

Yayın: 29 Temmuz 2024 21:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS: %0,24 (yüzdelik 14)
CWE: CWE-787
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	—	4.19.317
linux-linux-kernel	4.20	—	5.4.279
linux-linux-kernel	5.5	—	5.10.221
linux-linux-kernel	5.11	—	5.15.162
linux-linux-kernel	5.16	—	6.1.97
linux-linux-kernel	6.2	—	6.6.37
linux-linux-kernel	6.7	—	6.9.8

Kaynaklar

Uygulamada aç Tüm CVE kayıtları