Lucene search
+L

3 matches found

OSV
OSV
added 2025/01/21 12:1 p.m.9 views

CVE-2024-57930 tracing: Have process_string() also allow arrays

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

6.2AI score
SaveExploits0References9
CVE
CVE
added 2025/01/21 12:1 p.m.123 views

CVE-2024-57930

CVE-2024-57930 : Linux kernel tracing fix. The vulnerability arises because process_string() did not consistently handle cases where a %s argument in TP_printk() referred to an array, risking unsafe dereferences of string data in trace events. The fix expands process_string() to treat references ...

5.5CVSS6.7AI score0.00198EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2025/01/21 12:1 p.m.23 views

CVE-2024-57930 tracing: Have process_string() also allow arrays

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

0.00198EPSS
SaveExploits0References5
Rows per page
Query Builder