CVE - CVE-2024-36931

CVE-ID
CVE-2024-36931	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized kernel buffer and copy lbuf from userspace to that buffer. Later, we use scanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using scanf. Fix this issue by using memdup_user_nul instead.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/06759ebaf75c19c87b2453a5e130e9e61e9b5d65 URL:https://git.kernel.org/stable/c/06759ebaf75c19c87b2453a5e130e9e61e9b5d65 MISC:https://git.kernel.org/stable/c/10452edd175fcc4fd0f5ac782ed2a002e3e5d65c URL:https://git.kernel.org/stable/c/10452edd175fcc4fd0f5ac782ed2a002e3e5d65c MISC:https://git.kernel.org/stable/c/84b38f48836662c4bfae646c014f4e981e16a2b2 URL:https://git.kernel.org/stable/c/84b38f48836662c4bfae646c014f4e981e16a2b2 MISC:https://git.kernel.org/stable/c/c9d48ce163305595ae20aee27774192476d5e6a5 URL:https://git.kernel.org/stable/c/c9d48ce163305595ae20aee27774192476d5e6a5 MISC:https://git.kernel.org/stable/c/da7c622cddd4fe36be69ca61e8c42e43cde94784 URL:https://git.kernel.org/stable/c/da7c622cddd4fe36be69ca61e8c42e43cde94784
Assigning CNA
kernel.org
Date Record Created
20240530	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240530)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)