CVE-2024-43839

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

State: Published
Severity: Not scored
Published: Aug 17, 2024
Updated: May 11, 2026
Reserved: Aug 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

To have enough space to write all possible sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since 'bnad->netdev->name' is used there.

For '%d' specifiers, assume that they require: * 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8 * 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX is 16

And replace sprintf with snprintf.

Detected using the static analysis tool - Svace.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8b230ed8ec96c933047dd0625cf95f739e4939a6 to before f121740f69eda4da2de9a20a6687a13593e72540Affected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before c90b1cd7758fd4839909e838ae195d19f8065d76Affected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before 6ce46045f9b90d952602e2c0b8886cfadf860bf1Affected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before 6d20c4044ab4d0e6a99aa35853e66f0aed5589e3Affected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before ab748dd10d8742561f2980fea08ffb4f0cacfdefAffected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before b0ff0cd0847b03c0a0abe20cfa900eabcfcb9e43Affected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before e0f48f51d55fb187400e9787192eda09fa200ff5Affected 8b230ed8ec96c933047dd0625cf95f739e4939a6 to before c9741a03dc8e491e57b95fba0058ab46b7e506daAffected
LinuxLinux	2.6.37Affected before 2.6.37Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

8b230ed8ec96c933047dd0625cf95f739e4939a6 to before f121740f69eda4da2de9a20a6687a13593e72540Affected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before c90b1cd7758fd4839909e838ae195d19f8065d76Affected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before 6ce46045f9b90d952602e2c0b8886cfadf860bf1Affected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before 6d20c4044ab4d0e6a99aa35853e66f0aed5589e3Affected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before ab748dd10d8742561f2980fea08ffb4f0cacfdefAffected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before b0ff0cd0847b03c0a0abe20cfa900eabcfcb9e43Affected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before e0f48f51d55fb187400e9787192eda09fa200ff5Affected
8b230ed8ec96c933047dd0625cf95f739e4939a6 to before c9741a03dc8e491e57b95fba0058ab46b7e506daAffected

LinuxLinux

2.6.37Affected
before 2.6.37Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.