CVE-2024-54456

HIGH

Linux Kernel 6.5-6.6.78, 6.7-6.12.15, 6.13-6.13.3 - Out-of-bounds Write in NFS RPC Client Link Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() name is char[64] where the size of clnt->cl_program->name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0021
EPSS Percentile 11.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (14)
linux/Kernel 6.13.0 - 6.13.4linux
linux/Kernel 6.5.0 - 6.6.79linux
linux/Kernel 6.7.0 - 6.12.16linux
Linux/Linux < 6.5
Linux/Linux 6.12.16 - 6.12.*
Linux/Linux 6.13.4 - 6.13.*
Linux/Linux 6.14
Linux/Linux 6.5
Linux/Linux 6.6.79 - 6.6.*
Linux/Linux e13b549319a684dd80c4cc25e9567a5c84007e32 - 19b3ca651b4b473878c73539febe477905041442
... and 4 more
Published Feb 27, 2025
Tracked Since Feb 18, 2026