CVE-2024-36957

octeontx2-af: avoid off-by-one read from userspace

State: Published
Severity: Not scored
Published: May 30, 2024
Updated: May 23, 2026
Reserved: May 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: avoid off-by-one read from userspace

We try to access count + 1 byte from userspace with memdup_user(buffer, count + 1). However, the userspace only provides buffer of count bytes and only these count bytes are verified to be okay to access. To ensure the copied buffer is NUL terminated, we use memdup_user_nul instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	dae49384d0d7695540e2d75168f323cef1384810 to before bcdac70adceb44373da204c3c297f2a98e13216eAffected 3a2eb515d1367c0f667b76089a6e727279c688b8 to before ec697fbd38cbe2eef0948b58673b146caa95402fAffected 3a2eb515d1367c0f667b76089a6e727279c688b8 to before 8f11fe3ea3fc261640cfc8a5addd838000407c67Affected 3a2eb515d1367c0f667b76089a6e727279c688b8 to before 0a0285cee11c7dcc2657bcd456e469958a5009e7Affected 3a2eb515d1367c0f667b76089a6e727279c688b8 to before fc3e0076c1f82fe981d321e3a7bad4cbee542c19Affected 3a2eb515d1367c0f667b76089a6e727279c688b8 to before f299ee709fb45036454ca11e90cb2810fe771878Affected c9a2ed3fdd037314a71e6a6ba5d99a3605f6f9c7Affected 5.10.20 to before 5.10.217Affected 5.11.3 to before 5.12Affected
LinuxLinux	5.12Affected before 5.12Not affected 5.10.217 through 5.10.Not affected 5.15.159 through 5.15.Not affected 6.1.91 through 6.1.Not affected 6.6.31 through 6.6.Not affected 6.8.10 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

dae49384d0d7695540e2d75168f323cef1384810 to before bcdac70adceb44373da204c3c297f2a98e13216eAffected
3a2eb515d1367c0f667b76089a6e727279c688b8 to before ec697fbd38cbe2eef0948b58673b146caa95402fAffected
3a2eb515d1367c0f667b76089a6e727279c688b8 to before 8f11fe3ea3fc261640cfc8a5addd838000407c67Affected
3a2eb515d1367c0f667b76089a6e727279c688b8 to before 0a0285cee11c7dcc2657bcd456e469958a5009e7Affected
3a2eb515d1367c0f667b76089a6e727279c688b8 to before fc3e0076c1f82fe981d321e3a7bad4cbee542c19Affected
3a2eb515d1367c0f667b76089a6e727279c688b8 to before f299ee709fb45036454ca11e90cb2810fe771878Affected
c9a2ed3fdd037314a71e6a6ba5d99a3605f6f9c7Affected
5.10.20 to before 5.10.217Affected
5.11.3 to before 5.12Affected

LinuxLinux

5.12Affected
before 5.12Not affected
5.10.217 through 5.10.*Not affected
5.15.159 through 5.15.*Not affected
6.1.91 through 6.1.*Not affected
6.6.31 through 6.6.*Not affected
6.8.10 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.