CISA-2024-26994 — Vulnetix

CISA-2024-26994 PUBLISHED CVSS 5.9 MEDIUM

Reported by Linux · Published May 1, 2024

In the Linux kernel, the following vulnerability has been resolved: speakup: Avoid crash on very long word In case a console is set up really large and contains a really long word (> 256 characters), we have to stop before the length of the word buffer.

Risk Scores

CVSS 3.1

5.9

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
Linux	Linux	c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42
Linux	Linux	2.6.37, 0, 4.19.313
linux	linux_kernel	2.6.37, 2.6.37, 2.6.37
Linux	Linux	c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42, c6e3fd22cd538365bfeb82997d5b89562e077d42

Timeline

May 1, 2024 CVE Published
May 4, 2025 CVE Updated

References

https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html url
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html url

Open in Interactive Console →