CVE-2024-49995: tipc: guard against string buffer overrun
In the Linux kernel, the following vulnerability has been resolved:
tipc: guard against string buffer overrun
Smatch reports that copying medianame and ifname to nameparts may overwrite the destination.
.../bearer.c:166 bearernamevalidate() error: strcpy() 'medianame' too large for 'nameparts->medianame' (32 vs 16) .../bearer.c:167 bearernamevalidate() error: strcpy() 'ifname' too large for 'nameparts->ifname' (1010102 vs 16)
This does seem to be the case so guard against this possibility by using strscpy() and failing if truncation occurs.
Introduced by commit b97bf3fd8f6a ("[TIPC] Initial merge")
Compile tested only.
Other sources
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49995?
CVE-2024-49995 is a vulnerability in the Linux kernel that can lead to a string buffer overrun, potentially causing system instability.
How do I fix CVE-2024-49995?
To fix CVE-2024-49995, update your Linux kernel to versions 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1, or to an unaffected version outside of the specified vulnerable range.
Which versions of the Linux kernel are affected by CVE-2024-49995?
The affected versions include Linux kernel versions from 5.10.224 up to 6.11.3, excluding patched releases.
What types of systems are impacted by CVE-2024-49995?
CVE-2024-49995 impacts any system running the vulnerable versions of the Linux kernel.
What is the nature of the vulnerability indicated by CVE-2024-49995?
CVE-2024-49995 involves a flaw that can result in a string buffer overrun during the copying of certain media and interface names, potentially leading to denial of service.