2 matches found
kernel: ACPI: sysfs: validate return type of _STR method
A flaw was found in the Linux kernel. This vulnerability occurs in the ACPI Advanced Configuration and Power Interface system file system sysfs when processing the STR method. If a non-buffer object is returned, the system attempts to access invalid memory. A local attacker could exploit this to...
7.3CVSS7.1AI score0.00254EPSS
SaveExploits0References5
PT-2024-33707
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability in the Linux kernel has been identified where the description show function accesses invalid memory if the return type of the STR method is not a buffer object. Only buffer...
7.3CVSS0.00254EPSS
SaveExploits0
20