Riskcovery

CVE-2024-38560

scsi: bfa: Ensure the copied buf is NUL terminated

State
Published
Severity
Not scored
Published
Jun 19, 2024
Updated
Oct 15, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: bfa: Ensure the copied buf is NUL terminated

Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 481fc0c8617304a67649027c4a44723a139a0462Affected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 595a6b98deec01b6dbb20139f71edcd5fb760ec2Affected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 00b425ff0891283207d7bad607a2412225274d7aAffected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 1708e3cf2488788cba5489e4f913d227de757bafAffected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 7d3e694c4fe30f3aba9cd5ae86fb947a54c3db5cAffected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 204714e68015d6946279719fd464ecaf57240f35Affected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 7510fab46b1cbd1680e2a096e779aec3334b4143Affected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before ecb76200f5557a2886888aaa53702da1ab9e6cdfAffected
  • 9f30b674759b9a2da25aefe25d885161d8a911cb to before 13d0cecb4626fae67c00c84d3c7851f6b62f7df3Affected
LinuxLinux
  • 3.19Affected
  • before 3.19Not affected
  • 4.19.316 through 4.19.*Not affected
  • 5.4.278 through 5.4.*Not affected
  • 5.10.219 through 5.10.*Not affected
  • 5.15.161 through 5.15.*Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9.3 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.