CVE-2022-49401 mm/page_owner: use strscpy() instead of strlcpy()

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

CVE-2021-47642

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidiasetupi2cbus it looks like that can't happen after examiniing the call...

CVE-2021-47642

CVE-2021-47642: in the Linux kernel’s video fbdev/nvidiafb path, a fixed-size buffer overrun could occur by copying a channel name with strcpy into chan->adapter.name. The defect arises from copying into a 48-char buffer without length checks; fix is to use strscpy() to prevent overflows. The ...

CVE-2021-47642 video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity complains of a possible buffer overflow. However, given the 'static' scope of nvidiasetupi2cbus it looks like that can't happen after examiniing the call...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the use of strlcpy instead of strscpy by mm/pageowner...

PT-2025-14596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel. The issue is related to an out of bound read in the strscpy function. This occurred when the source buffer was not null-terminated,...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the return value of dpath not being handled incorrectly in the getcanonicaldevpath function, resulting in a...

PT-2025-8819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential buffer overflow issue has been identified in the Linux kernel, specifically in the nfs sysfs link rpc client function. The issue arises from the use of strcat with a char arr...

CVE-2024-49995

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-49995

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-49995

...

CVE-2024-49995

CVE-2024-49995 affects Linux kernels and is described as a string buffer overrun in the TIPC subsystem. Public advisories (e.g., Siemens/ICS, CISA, and Amazon Linux livepatch notes) identify the issue as resolved by updating to patched kernel versions or applying kernel livepatches (e.g., 4.14.35...

CVE-2024-49995

...

CVE-2024-42257 ext4: use memtostr_pad() for s_volume_name

In the Linux kernel, the following vulnerability has been resolved: ext4: use memtostrpad for svolumename As with the other strings in struct ext4superblock, svolumename is not NUL terminated. The other strings were marked in commit 072ebb3bffe6 "ext4: add nonstring annotations to ext4.h". Using...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the use of the strscpy function instead of the memtostrpad function...

CVE-2024-26889

A buffer overflow flaw was found in struct hcidevinfo in the variable name8 in the Linkkux Kernel. If an attacker crafts an exploit copying more than the size of the name8, it results in a buffer overflow and a denial of service...

DEBIAN-CVE-2024-26889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field so in the event that hdev-name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switchi...

CVE-2024-26889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field so in the event that hdev-name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switchi...

UBUNTU-CVE-2024-26889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field so in the event that hdev-name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switchi...