CVE - CVE-2024-26736

CVE-ID
CVE-2024-26736	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE. [DH: Actually, it's 20 + NUL, so increase it to 24 and use snprintf()]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5 URL:https://git.kernel.org/stable/c/5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5 MISC:https://git.kernel.org/stable/c/6e6065dd25b661420fac19c34282b6c626fcd35e URL:https://git.kernel.org/stable/c/6e6065dd25b661420fac19c34282b6c626fcd35e MISC:https://git.kernel.org/stable/c/6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d URL:https://git.kernel.org/stable/c/6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d MISC:https://git.kernel.org/stable/c/d34a5e57632bb5ff825196ddd9a48ca403626dfa URL:https://git.kernel.org/stable/c/d34a5e57632bb5ff825196ddd9a48ca403626dfa MISC:https://git.kernel.org/stable/c/d9b5e2b7a8196850383c70d099bfd39e81ab6637 URL:https://git.kernel.org/stable/c/d9b5e2b7a8196850383c70d099bfd39e81ab6637 MISC:https://git.kernel.org/stable/c/e56662160fc24d28cb75ac095cc6415ae1bda43e URL:https://git.kernel.org/stable/c/e56662160fc24d28cb75ac095cc6415ae1bda43e MISC:https://git.kernel.org/stable/c/e8530b170e464017203e3b8c6c49af6e916aece1 URL:https://git.kernel.org/stable/c/e8530b170e464017203e3b8c6c49af6e916aece1
Assigning CNA
kernel.org
Date Record Created
20240219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)