CVE detail
CVE-2024-36934 — CVE-2024-36934
Published 2024-05-30 · Modified 2026-06-17 · Vendor linux · Product linux_kernel · Source nvd
HIGH
severity
CVSS-derived band
0.0029
EPSS probability
exploitation probability, 30d
22.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
In the Linux kernel, the following vulnerability has been resolved:
bna: ensure the copied buf is NUL terminated
Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from
userspace to that buffer. Later, we use sscanf on this buffer but we don't
ensure that the string is terminated inside the buffer, this can lead to
OOB read when using sscanf. Fix this issue by using memdup_user_nul
instead of memdup_user.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References