Riskcovery

CVE-2024-36935

ice: ensure the copied buf is NUL terminated

State
Published
Severity
Not scored
Published
May 30, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: ensure the copied buf is NUL terminated

Currently, we allocate a count-sized kernel buffer and copy count bytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 96a9a9341cdaea0c3bce4c134e04a2a42ae899ac to before 5ff4de981983ed84f29b5d92b6550ec054e12a92Affected
  • 96a9a9341cdaea0c3bce4c134e04a2a42ae899ac to before 666854ea9cad844f75a068f32812a2d78004914aAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.