Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-23851
HistoryJan 23, 2024 - 9:15 a.m.

Design/Logic Flaw

2024-01-2309:15:00
PRIOn knowledge base
www.prio-n.com
10
design flaw
logic flaw
linux kernel
data size check
ctl_ioctl
nvd

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

copy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INT_MAX bytes, and crash, because of a missing param_kernel->data_size check. This is related to ctl_ioctl.

CPENameOperatorVersion
linux_kernelle6.7.1

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%