Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26736
HistoryApr 04, 2024 - 1:52 a.m.

CVE-2024-26736

2024-04-0401:52:37
redhat.com
access.redhat.com
7
linux
kernel
vulnerability
resolved
afs
volume
buffer size
overflow

AI Score

7.1

Confidence

Low

EPSS

0

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE. [DH: Actually, it’s 20 + NUL, so increase it to 24 and use snprintf()]

AI Score

7.1

Confidence

Low

EPSS

0

Percentile

10.3%