Lucene search

K
redhatcveRedhat.comRH:CVE-2024-38579
HistoryJun 20, 2024 - 3:28 p.m.

CVE-2024-38579

2024-06-2015:28:00
redhat.com
access.redhat.com
2
linux kernel
pointer arithmetic
vulnerability
crypto: bcm
linux verification center
svace

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len. Found by Linux Verification Center (linuxtesting.org) with SVACE.

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

Related for RH:CVE-2024-38579