CVSS 7.8 · High EPSS 0,28%
Kerentanan Out-of-bounds Write pada linux kernel, debian linux +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential static_command_line memory overflow We allocate memory of size 'xlen + strlen(boot_command_line) + 1' for static_command_line, but the strings copied into static_command_line are extra_command_line and command_line, rather than extra_command_line and boot_command_line. When strlen(command_line) > strlen(boot_command_line), static_command_line will overflow. This patch just recovers strlen(command_line) which was miss-consolidated with strlen(boot_command_line) in the commit f5c7310ac73e ("init/main: add checks for the return value of memblock_alloc*()")
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 5.1 hingga sebelum 5.10.216 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.157 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.88 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.29 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.8.8 |
| linux | linux kernel | Versi 6.9 rc1 |
| linux | linux kernel | Versi 6.9 rc2 |
| linux | linux kernel | Versi 6.9 rc3 |
| linux | linux kernel | Versi 6.9 rc4 |
| debian | debian linux | Versi 10.0 |
| fedoraproject | fedora | Versi 38 |
| fedoraproject | fedora | Versi 39 |
| fedoraproject | fedora | Versi 40 |