NetSight
IP …
high8.1

CVE-2024-26736

In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid value…

Impact

In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE. [DH: Actually, it's 20 + NUL, so increase it to 24 and use snprintf()]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15 before 5.4.270
from 5.5 before 5.10.211
from 5.11 before 5.15.150
from 5.16 before 6.1.80
from 6.2 before 6.6.19
from 6.7 before 6.7.7
DebianDebian Linux
Version 10.0

Weakness classification

CWE-787

References