CVE - CVE-2024-43839

CVE-ID
CVE-2024-43839	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to write all possible sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since 'bnad->netdev->name' is used there. For '%d' specifiers, assume that they require: * 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8 * 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX is 16 And replace sprintf with snprintf. Detected using the static analysis tool - Svace.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/6ce46045f9b90d952602e2c0b8886cfadf860bf1 URL:https://git.kernel.org/stable/c/6ce46045f9b90d952602e2c0b8886cfadf860bf1 MISC:https://git.kernel.org/stable/c/6d20c4044ab4d0e6a99aa35853e66f0aed5589e3 URL:https://git.kernel.org/stable/c/6d20c4044ab4d0e6a99aa35853e66f0aed5589e3 MISC:https://git.kernel.org/stable/c/ab748dd10d8742561f2980fea08ffb4f0cacfdef URL:https://git.kernel.org/stable/c/ab748dd10d8742561f2980fea08ffb4f0cacfdef MISC:https://git.kernel.org/stable/c/b0ff0cd0847b03c0a0abe20cfa900eabcfcb9e43 URL:https://git.kernel.org/stable/c/b0ff0cd0847b03c0a0abe20cfa900eabcfcb9e43 MISC:https://git.kernel.org/stable/c/c90b1cd7758fd4839909e838ae195d19f8065d76 URL:https://git.kernel.org/stable/c/c90b1cd7758fd4839909e838ae195d19f8065d76 MISC:https://git.kernel.org/stable/c/c9741a03dc8e491e57b95fba0058ab46b7e506da URL:https://git.kernel.org/stable/c/c9741a03dc8e491e57b95fba0058ab46b7e506da MISC:https://git.kernel.org/stable/c/e0f48f51d55fb187400e9787192eda09fa200ff5 URL:https://git.kernel.org/stable/c/e0f48f51d55fb187400e9787192eda09fa200ff5 MISC:https://git.kernel.org/stable/c/f121740f69eda4da2de9a20a6687a13593e72540 URL:https://git.kernel.org/stable/c/f121740f69eda4da2de9a20a6687a13593e72540
Assigning CNA
kernel.org
Date Record Created
20240817	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240817)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)