Lucene search

K
osvGoogleOSV:CVE-2024-27401
HistoryMay 14, 2024 - 3:12 p.m.

CVE-2024-27401

2024-05-1415:12:00
Google
osv.dev
5
linux kernel
vulnerability resolved
firewire
user_length
packet contents
prevention
software

AI Score

6.7

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.