Linux do_active_device() Heap Buffer Overflow

🗓️ 24 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 22 Views

Buffer overread in do_active_device() risks confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 279
AstraLinux	Astra Linux – Vulnerability in Linux, Linux 5.15	15 Oct 202615:53	–	astralinux
CBLMariner	CVE-2024-50074 affecting package kernel for versions less than 5.15.173.1-1	11 Dec 202407:24	–	cbl_mariner
Tenable Nessus	Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1178)	1 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-4008 : linux-config-6.1 - security update	3 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-4075 : ata-modules-5.10.0-29-armmp-di - security update	1 Mar 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1140)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1159)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1176)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1192)	10 Feb 202500:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2025-1547)	17 May 202500:00	–	nessus

Vulners

Node

OR

red_hat,red_hat_enterprise_linuxMatch8

red_hat,red_hat_enterprise_linuxMatch9

canonical ubuntuMatch24.10

Source	Link
git	www.git.kernel.org/stable/c/02ac3a9ef3a18b58d8f3ea2b6e46de657bf6c4f9
git	www.git.kernel.org/stable/c/1826b6d69bbb7f9ae8711827facbb2ad7f8d0aaa
git	www.git.kernel.org/stable/c/2a8b26a09c8e3ea03da1ef3cd0ef6b96e559fba6
git	www.git.kernel.org/stable/c/440311903231c6e6c9bcf8acb6a2885a422e00bc
git	www.git.kernel.org/stable/c/66029078fee00646e2e9dbb8f41ff7819f8e7569
git	www.git.kernel.org/stable/c/8aadef73ba3b325704ed5cfc4696a25c350182cf
git	www.git.kernel.org/stable/c/b0641e53e6cb937487b6cfb15772374f0ba149b3
git	www.git.kernel.org/stable/c/fca048f222ce9dcbde5708ba2bf81d85a4a27952
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024102935-CVE-2024-50074-d44d@gregkh/

29 Oct 2025 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 26.8

CVSS 37.8

EPSS0.00238

buffer overread do active device parport procfs linux kernel information confidentiality data integrity system availability