Lucene search

K
redhatcveRedhat.comRH:CVE-2024-27401
HistoryMay 14, 2024 - 9:54 p.m.

CVE-2024-27401

2024-05-1421:54:14
redhat.com
access.redhat.com
3
linux
kernel
vulnerability
cve-2024-27401
firewire
user space
overflow
security fix

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.4%

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.4%