Riskcovery

CVE-2024-42257

ext4: use memtostr_pad() for s_volume_name

State
Published
Severity
Not scored
Published
Aug 8, 2024
Updated
May 11, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: use memtostr_pad() for s_volume_name

As with the other strings in struct ext4_super_block, s_volume_name is not NUL terminated. The other strings were marked in commit 072ebb3bffe6 ("ext4: add nonstring annotations to ext4.h"). Using strscpy() isn't the right replacement for strncpy(); it should use memtostr_pad() instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 744a56389f7398f286231e062c2e63f0de01bcc6 to before 4378be89ddb7de88d984b67ecfd6191686c42817Affected
  • 744a56389f7398f286231e062c2e63f0de01bcc6 to before be27cd64461c45a6088a91a04eba5cd44e1767efAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.10.1 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.