NetSight
IP …
high7.8

CVE-2024-43839

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to write…

Impact

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to write all possible sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since 'bnad->netdev->name' is used there. For '%d' specifiers, assume that they require: * 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8 * 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX is 16 And replace sprintf with snprintf. Detected using the static analysis tool - Svace.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 11.0
LinuxLinux Kernel
from 2.6.37 before 4.19.320
from 4.20 before 5.4.282
from 5.5 before 5.10.224
from 5.11 before 5.15.165
from 5.16 before 6.1.103
from 6.2 before 6.6.44

Weakness classification

CWE-787

References