CVE-2024-38585
HIGHLinux Kernel 5.19-6.1.92, 6.2-6.6.32, 6.7-6.8.11, 6.9-6.9.2 - Out-of-bounds Read in realloc()
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of heap->len to prevent realloc() from copying an extra sizeof(heap) bytes from beyond the allocated region.
References (5)
Core 5
Core References
Scores
CVSS v3
7.1
EPSS
0.0023
EPSS Percentile
14.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-125
Status
published
Products (17)
linux/Kernel
5.19.0 - 6.1.93linux
linux/Kernel
6.2.0 - 6.6.33linux
linux/Kernel
6.7.0 - 6.8.12linux
linux/Kernel
6.9.0 - 6.9.3linux
Linux/Linux
< 5.19
Linux/Linux
0e0ff638400be8f497a35b51a4751fd823f6bd6a - 4e6f225aefeb712cdb870176b6621f02cf235b8c
Linux/Linux
0e0ff638400be8f497a35b51a4751fd823f6bd6a - 5996b2b2dac739f2a27da13de8eee5b85b2550b3
Linux/Linux
0e0ff638400be8f497a35b51a4751fd823f6bd6a - 791f4641142e2aced85de082e5783b4fb0b977c2
Linux/Linux
0e0ff638400be8f497a35b51a4751fd823f6bd6a - 8019d3dd921f39a237a9fab6d2ce716bfac0f983
Linux/Linux
0e0ff638400be8f497a35b51a4751fd823f6bd6a - f678c3c336559cf3255a32153e9a17c1be4e7c15
... and 7 more
Published
Jun 19, 2024
Tracked Since
Feb 18, 2026