NetSight
IP …
high7.8

CVE-2024-27401

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensu…

Impact

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.36 before 4.19.314
from 4.20 before 5.4.276
from 5.5 before 5.10.217
from 5.11 before 5.15.159
from 5.16 before 6.1.91
from 6.2 before 6.6.31
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 39, 40

References