Lucene search

K
osvGoogleOSV:CVE-2024-42292
HistoryAug 17, 2024 - 9:15 a.m.

CVE-2024-42292

2024-08-1709:15:09
Google
osv.dev
linux kernel
oob memory access
vulnerability
fix
zap_modalias_env
memmove

AI Score

6.6

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved:

kobject_uevent: Fix OOB access within zap_modalias_env()

zap_modalias_env() wrongly calculates size of memory block to move, so
will cause OOB memory access issue if variable MODALIAS is not the last
one within its @env parameter, fixed by correcting size to memmove.

AI Score

6.6

Confidence

Low