CVE-2024-27401

firewire: nosy: ensure user_length is taken into account when fetching packet contents

State: Published
Severity: 7.8 High
Published: May 13, 2024
Updated: Aug 5, 2026
Reserved: Feb 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

firewire: nosy: ensure user_length is taken into account when fetching packet contents

Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	286468210d83ce0ca1e37e346ed9f4457a161650 to before 67f34f093c0f7bf33f5b4ae64d3d695a3b978285Affected 286468210d83ce0ca1e37e346ed9f4457a161650 to before 7b8c7bd2296e95b38a6ff346242356a2e7190239Affected 286468210d83ce0ca1e37e346ed9f4457a161650 to before cca330c59c54207567a648357835f59df9a286bbAffected 286468210d83ce0ca1e37e346ed9f4457a161650 to before 79f988d3ffc1aa778fc5181bdfab312e57956c6bAffected 286468210d83ce0ca1e37e346ed9f4457a161650 to before 4ee0941da10e8fdcdb34756b877efd3282594c1fAffected 286468210d83ce0ca1e37e346ed9f4457a161650 to before 1fe60ee709436550f8cfbab01295936b868d5baaAffected 286468210d83ce0ca1e37e346ed9f4457a161650 to before 539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41cAffected 286468210d83ce0ca1e37e346ed9f4457a161650 to before 38762a0763c10c24a4915feee722d7aa6e73eb98Affected
LinuxLinux	2.6.36Affected before 2.6.36Not affected 4.19.314 through 4.19.Not affected 5.4.276 through 5.4.Not affected 5.10.217 through 5.10.Not affected 5.15.159 through 5.15.Not affected 6.1.91 through 6.1.Not affected 6.6.31 through 6.6.Not affected 6.8.10 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

286468210d83ce0ca1e37e346ed9f4457a161650 to before 67f34f093c0f7bf33f5b4ae64d3d695a3b978285Affected
286468210d83ce0ca1e37e346ed9f4457a161650 to before 7b8c7bd2296e95b38a6ff346242356a2e7190239Affected
286468210d83ce0ca1e37e346ed9f4457a161650 to before cca330c59c54207567a648357835f59df9a286bbAffected
286468210d83ce0ca1e37e346ed9f4457a161650 to before 79f988d3ffc1aa778fc5181bdfab312e57956c6bAffected
286468210d83ce0ca1e37e346ed9f4457a161650 to before 4ee0941da10e8fdcdb34756b877efd3282594c1fAffected
286468210d83ce0ca1e37e346ed9f4457a161650 to before 1fe60ee709436550f8cfbab01295936b868d5baaAffected
286468210d83ce0ca1e37e346ed9f4457a161650 to before 539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41cAffected
286468210d83ce0ca1e37e346ed9f4457a161650 to before 38762a0763c10c24a4915feee722d7aa6e73eb98Affected

LinuxLinux

2.6.36Affected
before 2.6.36Not affected
4.19.314 through 4.19.*Not affected
5.4.276 through 5.4.*Not affected
5.10.217 through 5.10.*Not affected
5.15.159 through 5.15.*Not affected
6.1.91 through 6.1.*Not affected
6.6.31 through 6.6.*Not affected
6.8.10 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.