CVE-2024-54456: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix potential buffer overflowin nfssysfslinkrpcclient()
name is char[64] where the size of clnt->clprogram->name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix potential buffer overflowin nfssysfslinkrpcclient()
name is char[64] where the size of clnt-clprogram-name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.16-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In nfs_sysfs_link_rpc_client(), replace direct strcat() usage with strscpy() and strncat() to prevent buffer overflow when copying into name, which is char[64].
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54456?
The severity of CVE-2024-54456 is categorized as moderate due to the potential for a buffer overflow in the Linux kernel.
How do I fix CVE-2024-54456?
To fix CVE-2024-54456, you should update your Linux kernel to the latest stable version where the vulnerability has been resolved.
What systems are affected by CVE-2024-54456?
CVE-2024-54456 affects the Linux kernel, particularly systems utilizing the NFS (Network File System) feature.
What are the risks associated with CVE-2024-54456?
The risks associated with CVE-2024-54456 include potential system crashes or unauthorized access due to buffer overflow vulnerabilities.
Can CVE-2024-54456 be exploited remotely?
Yes, CVE-2024-54456 could potentially be exploited remotely if an attacker manipulates the NFS functionality of an affected system.