CVE-2024-38577

HIGH

Linux Kernel 5.8-6.9.3 Buffer Overflow in rcu-tasks show_rcu_tasks_trace_gp_kthread

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of buffer overflow in show_rcu_tasks_trace_gp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed for this are unrealistically high, but buffer overflow is still possible. Use snprintf() with buffer size instead of sprintf(). Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS v3 7.8
EPSS 0.0025
EPSS Percentile 17.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-120
Status published
Products (23)
linux/Kernel 5.11.0 - 5.15.167linux
linux/Kernel 5.16.0 - 6.1.93linux
linux/Kernel 5.8.0 - 5.10.226linux
linux/Kernel 6.2.0 - 6.6.33linux
linux/Kernel 6.7.0 - 6.8.12linux
linux/Kernel 6.9.0 - 6.9.3linux
Linux/Linux < 5.8
Linux/Linux 5.10.226 - 5.10.*
Linux/Linux 5.15.167 - 5.15.*
Linux/Linux 5.8
... and 13 more
Published Jun 19, 2024
Tracked Since Feb 18, 2026