CVE-2024-42284

tipc: Return non-zero value from tipc_udp_addr2str() on error

State: Published
Severity: 9.1 Critical
Published: Aug 17, 2024
Updated: Aug 5, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

tipc: Return non-zero value from tipc_udp_addr2str() on error

tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d0f91938bede204a343473792529e0db7d599836 to before 7ec3335dd89c8d169e9650e4bac64fde71fdf15bAffected d0f91938bede204a343473792529e0db7d599836 to before 253405541be2f15ffebdeac2f4cf4b7e9144d12fAffected d0f91938bede204a343473792529e0db7d599836 to before aa38bf74899de07cf70b50cd17f8ad45fb6654c8Affected d0f91938bede204a343473792529e0db7d599836 to before 5eea127675450583680c8170358bcba43227bd69Affected d0f91938bede204a343473792529e0db7d599836 to before 728734352743a78b4c5a7285b282127696a4a813Affected d0f91938bede204a343473792529e0db7d599836 to before 76ddf84a52f0d8ec3f5db6ccce08faf202a17d28Affected d0f91938bede204a343473792529e0db7d599836 to before 2abe350db1aa599eeebc6892237d0bce0f1de62aAffected d0f91938bede204a343473792529e0db7d599836 to before fa96c6baef1b5385e2f0c0677b32b3839e716076Affected
LinuxLinux	4.1Affected before 4.1Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

d0f91938bede204a343473792529e0db7d599836 to before 7ec3335dd89c8d169e9650e4bac64fde71fdf15bAffected
d0f91938bede204a343473792529e0db7d599836 to before 253405541be2f15ffebdeac2f4cf4b7e9144d12fAffected
d0f91938bede204a343473792529e0db7d599836 to before aa38bf74899de07cf70b50cd17f8ad45fb6654c8Affected
d0f91938bede204a343473792529e0db7d599836 to before 5eea127675450583680c8170358bcba43227bd69Affected
d0f91938bede204a343473792529e0db7d599836 to before 728734352743a78b4c5a7285b282127696a4a813Affected
d0f91938bede204a343473792529e0db7d599836 to before 76ddf84a52f0d8ec3f5db6ccce08faf202a17d28Affected
d0f91938bede204a343473792529e0db7d599836 to before 2abe350db1aa599eeebc6892237d0bce0f1de62aAffected
d0f91938bede204a343473792529e0db7d599836 to before fa96c6baef1b5385e2f0c0677b32b3839e716076Affected

LinuxLinux

4.1Affected
before 4.1Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.