NetSight
IP …
high7.8

CVE-2024-38587

In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values.

Impact

In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.313 before 4.19.316
from 5.4.275 before 5.4.278
from 5.10.216 before 5.10.219
from 5.15.157 before 5.15.161
from 6.1.88 before 6.1.93
from 6.6.29 before 6.6.33

Weakness classification

CWE-129

References