Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2025/01/21 12:1 p.m.20 views

CVE-2024-57930 tracing: Have process_string() also allow arrays

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

0.00198EPSS
SaveExploits0References5
CVE
CVE
added 2025/01/21 12:1 p.m.121 views

CVE-2024-57930

CVE-2024-57930 : Linux kernel tracing fix. The vulnerability arises because process_string() did not consistently handle cases where a %s argument in TP_printk() referred to an array, risking unsafe dereferences of string data in trace events. The fix expands process_string() to treat references ...

5.5CVSS6.7AI score0.00198EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/01/21 12:1 p.m.9 views

CVE-2024-57930 tracing: Have process_string() also allow arrays

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

5.5CVSS6.2AI score0.00198EPSS
SaveExploits0References9
Rows per page
Query Builder