Riskcovery

CVE-2024-46823

kunit/overflow: Fix UB in overflow_allocation_test

State
Published
Severity
8.4 High
Published
Sep 27, 2024
Updated
Aug 5, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

kunit/overflow: Fix UB in overflow_allocation_test

The 'device_name' array doesn't exist out of the 'overflow_allocation_test' function scope. However, it is being used as a driver name when calling 'kunit_driver_create' from 'kunit_device_register'. It produces the kernel panic with KASAN enabled.

Since this variable is used in one place only, remove it and pass the device name into kunit_device_register directly as an ascii string.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d03c720e03bd9bf0b784d80b5d3ede7e2daf3b6e to before d1207f07decc66546a7fa463d2f335a856c986efAffected
  • d03c720e03bd9bf0b784d80b5d3ede7e2daf3b6e to before 92e9bac18124682c4b99ede9ee3bcdd68f121e92Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.