Lucene search

K
redhatcveRedhat.comRH:CVE-2024-23851
HistoryJan 25, 2024 - 7:03 p.m.

CVE-2024-23851

2024-01-2519:03:00
redhat.com
access.redhat.com
19
linux kernel
copy_params
drivers
vulnerability
data_size
ctl_ioctl

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

A vulnerability was found in copy_params in drivers/md/dm-ioctl.c in the Linux kernel, where it can attempt to allocate more than INT_MAX bytes and crash due to a missing param_kernel->data_size check. This issue is related to ctl_ioctl.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%