CVE - CVE-2024-39482

CVE-ID
CVE-2024-39482	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either allocated on the stack with a fixed size MAX_BSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the struct had a fixed-length array of size MAX_BSETS which was indexed out-of-bounds for the dynamically-sized iterators, which causes UBSAN to complain. This patch uses the same approach as in bcachefs's sort_iter and splits the iterator into a btree_iter with a flexible array member and a btree_iter_stack which embeds a btree_iter as well as a fixed-length data array.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0c31344e22dd8d6b1394c6e4c41d639015bdc671 URL:https://git.kernel.org/stable/c/0c31344e22dd8d6b1394c6e4c41d639015bdc671 MISC:https://git.kernel.org/stable/c/2c3d7b03b658dc8bfa6112b194b67b92a87e081b URL:https://git.kernel.org/stable/c/2c3d7b03b658dc8bfa6112b194b67b92a87e081b MISC:https://git.kernel.org/stable/c/3a861560ccb35f2a4f0a4b8207fa7c2a35fc7f31 URL:https://git.kernel.org/stable/c/3a861560ccb35f2a4f0a4b8207fa7c2a35fc7f31 MISC:https://git.kernel.org/stable/c/5a1922adc5798b7ec894cd3f197afb6f9591b023 URL:https://git.kernel.org/stable/c/5a1922adc5798b7ec894cd3f197afb6f9591b023 MISC:https://git.kernel.org/stable/c/6479b9f41583b013041943c4602e1ad61cec8148 URL:https://git.kernel.org/stable/c/6479b9f41583b013041943c4602e1ad61cec8148 MISC:https://git.kernel.org/stable/c/934e1e4331859183a861f396d7dfaf33cb5afb02 URL:https://git.kernel.org/stable/c/934e1e4331859183a861f396d7dfaf33cb5afb02
Assigning CNA
kernel.org
Date Record Created
20240625	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240625)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)