Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-27401
HistoryMay 14, 2024 - 3:12 p.m.

CVE-2024-27401

2024-05-1415:12:29
Debian Security Bug Tracker
security-tracker.debian.org
3
linux kernel
firewire
vulnerability

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.4%

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.4%