Riskcovery

CVE-2024-54456

NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()

State
Published
Severity
7.8 High
Published
Feb 27, 2025
Updated
Aug 5, 2026
Reserved
Feb 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()

name is char[64] where the size of clnt->cl_program->name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to before 19b3ca651b4b473878c73539febe477905041442Affected
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to before dd8830779b77f4d1206d28d02ad56a03fc0e78f7Affected
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to before e8e0eb5601d4a6c74c336e3710afe3a0348c469dAffected
  • e13b549319a684dd80c4cc25e9567a5c84007e32 to before 49fd4e34751e90e6df009b70cd0659dc839e7ca8Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.79 through 6.6.*Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.