Lucene search

K
cvelistMitreCVELIST:CVE-2024-25739
HistoryFeb 12, 2024 - 12:00 a.m.

CVE-2024-25739

2024-02-1200:00:00
mitre
www.cve.org
linux
kernel
vulnerability
create_empty_lvol
drivers
mtd
ubi
vtbl.c
zero bytes
crash
missing check
leb_size
cve-2024-25739

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%