Riskcovery

CVE-2024-56716

netdevsim: prevent bad user input in nsim_dev_health_break_write()

State
Published
Severity
5.5 Medium
Published
Dec 29, 2024
Updated
May 11, 2026
Reserved
Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: prevent bad user input in nsim_dev_health_break_write()

If either a zero count or a large one is provided, kernel can crash.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-1284 Improper Validation of Specified Quantity in Input

Affected Products

ProductVersions
LinuxLinux
  • 82c93a87bf8bc0cdb5ec2ab99da7d87715ff889f to before 81bdfcd6e6a998e219c9dd49ec7291c2e0594bbcAffected
  • 82c93a87bf8bc0cdb5ec2ab99da7d87715ff889f to before b3a6daaf7cfb2de37b89fd7a5a2ad4ea9aa3e181Affected
  • 82c93a87bf8bc0cdb5ec2ab99da7d87715ff889f to before d10321be26ff9e9e912697e9e8448099654ff561Affected
  • 82c93a87bf8bc0cdb5ec2ab99da7d87715ff889f to before 470c5ecbac2f19b1cdee2a6ce8d5650c3295c94bAffected
  • 82c93a87bf8bc0cdb5ec2ab99da7d87715ff889f to before 8e9ef6bdf71bf25f4735e0230ce1919de8985835Affected
  • 82c93a87bf8bc0cdb5ec2ab99da7d87715ff889f to before ee76746387f6233bdfa93d7406990f923641568fAffected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.233 through 5.10.*Not affected
  • 5.15.176 through 5.15.*Not affected
  • 6.1.122 through 6.1.*Not affected
  • 6.6.68 through 6.6.*Not affected
  • 6.12.7 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.