CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
bna: adjust 'name' buf size of bnatcb and bnaccb structures
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.167.1-1 - Configuration
Replace sprintf() with snprintf() when writing into the 'name' buffers of the bna_tcb and bna_ccb structures, and ensure the buffers are sized (in bna_tcb and bna_ccb) to accommodate all possible sprintf() arguments so the first '%s' using bnad->netdev->name cannot exceed the buffer capacity (Svace static analysis finding).
bna (Linux kernel driver) replace sprintf with snprintf for name formatting = snprintf - Configuration
Adjust the 'name' buffer size in the bna_tcb and bna_ccb structures so there is enough space to write all possible sprintf() arguments; the issue notes the current 'name' size is 16, but the first '%s' specifier may already need at least 16 characters (bnad->netdev->name), plus additional characters required for other sprintf() arguments.
bna (Linux kernel driver) adjust 'name' buffer size of bna_tcb and bna_ccb = increase from 16
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43839?
CVE-2024-43839 is considered a high-severity vulnerability due to potential buffer overflow risks in the Linux kernel.
How do I fix CVE-2024-43839?
To fix CVE-2024-43839, update your Linux kernel to version 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-43839?
CVE-2024-43839 affects Linux kernel versions prior to 5.10.226-1, 6.1.123-1, and others specified in the remediation list.
What kind of vulnerability is CVE-2024-43839?
CVE-2024-43839 is a buffer overflow vulnerability that can occur due to insufficient buffer size in certain kernel structures.
Is CVE-2024-43839 remotely exploitable?
CVE-2024-43839 may be remotely exploitable depending on how the affected Linux kernel is deployed and configured.