CVE-2024-36935: ice: ensure the copied buf is NUL terminated
In the Linux kernel, the following vulnerability has been resolved:
ice: ensure the copied buf is NUL terminated
Currently, we allocate a count-sized kernel buffer and copy count bytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdupusernul instead of memdupuser.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36935?
CVE-2024-36935 is considered to have a significant impact due to potential memory corruption leading to security vulnerabilities.
How do I fix CVE-2024-36935?
To resolve CVE-2024-36935, upgrade your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
Which Linux kernel versions are affected by CVE-2024-36935?
CVE-2024-36935 affects Linux kernel versions between 6.8 and 6.9-rc6.
What should I do if I am running an affected version of the Linux kernel related to CVE-2024-36935?
If you are running an affected version of the Linux kernel, it is critical to apply the relevant security patches or upgrade to a secure version immediately.
Is there a workaround for CVE-2024-36935 while waiting for a patch?
Currently, there are no recommended workarounds for CVE-2024-36935 other than upgrading the kernel to a secure version.