CVE-2024-38587

MEDIUM

Linux Kernel - Out-of-Bounds Write via Incorrect ARRAY_SIZE() Usage in speakup

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds.

References (12)

Core 12
Core References

Scores

CVSS v3 5.3
EPSS 0.0114
EPSS Percentile 62.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-129
Status published
Products (36)
linux/Kernel < 4.19.316linux
linux/Kernel 4.20.0 - 5.4.278linux
linux/Kernel 5.11.0 - 5.15.161linux
linux/Kernel 5.16.0 - 6.1.93linux
linux/Kernel 5.5.0 - 5.10.219linux
linux/Kernel 6.2.0 - 6.6.33linux
linux/Kernel 6.7.0 - 6.8.12linux
linux/Kernel 6.9.0 - 6.9.3linux
Linux/Linux < 6.9
Linux/Linux 0d130158db29f5e0b3893154908cf618896450a8 - 504178fb7d9f6cdb0496d5491efb05f45597e535
... and 26 more
Published Jun 19, 2024
Tracked Since Feb 18, 2026