VDB
GHSA-74mg-f7w3-pcrr
GHSA-74mg-f7w3-pcrr
PUBLISHED
CVSS 7.800000190734863 HIGH
Record from GitHub Advisory Database · Published February 20, 2024
In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.
Risk scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
- Feb 20, 2024 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-74mg-f7w3-pcrr
vulnetix vdb fixes GHSA-74mg-f7w3-pcrr
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-74mg-f7w3-pcrr/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-52436 advisory
- https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a url
- https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135 url
- https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36 url
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html url
- https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11 url
- https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52 url
- https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a url
- https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564 url
- https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea url
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html url