VDB
DEBIAN-CVE-2024-36931
DEBIAN-CVE-2024-36931
PUBLISHED
CVSS 7.099999904632568 HIGH
In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf-sized kernel buffer and copy lbuf from userspace to that buffer. Later, we use scanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using scanf. Fix this issue by using memdup_user_nul instead.
Risk Scores
CVSS v3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | linux | 6.1.67-1, 6.1.90-1, 6.1.90-1 |
| Debian:14 | linux | 0, 0 |
| Debian:13 | linux | 0, 0 |
Timeline
- May 30, 2024 CVE Published
- Apr 28, 2026 CVE Updated