CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated
In the Linux kernel, the following vulnerability has been resolved:
scsi: bfa: Ensure the copied buf is NUL terminated
Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdupusernul instead of memdupuser.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Compensating control
In the scsi: bfa code, replace memdup_user with memdup_user_nul so the copied userspace buffer is NUL terminated before it is passed to sscanf.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38560?
CVE-2024-38560 has a severity that is commonly evaluated using the CVSS scoring system, which indicates a potential for significant impact depending on the exploit vector.
How do I fix CVE-2024-38560?
To remediate CVE-2024-38560, you should upgrade your Linux kernel to a version that is not vulnerable, specifically to version 5.10.223-1 or later, or 6.1.119-1 or later.
Which Linux kernel versions are affected by CVE-2024-38560?
CVE-2024-38560 affects various Linux kernel versions including those between 3.19 and 4.19, 4.20 and 5.4, 5.5 and 5.10, 5.11 and 5.15, 5.16 and 6.1, and 6.2 and 6.6.
What components are involved in CVE-2024-38560 vulnerability?
The CVE-2024-38560 vulnerability is related to the SCSI (Small Computer System Interface) component, specifically affecting the bfa (Beckhoff Ethernet Communication) driver in Linux.
Is there a workaround for CVE-2024-38560 if updating is not possible?
While the best practice for CVE-2024-38560 is to apply the necessary updates, disabling the affected driver may serve as a temporary measure to mitigate the risk.