CVE-2024-38559

🎯 CVE-2024-38559 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2024-38559 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user.

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Ensure the copied buf is NUL terminated

Currently, we allocate a count-sized kernel buffer and copy count from
userspace to that buffer. Later, we use kstrtouint on this buffer but we
don't ensure that the string is terminated inside the buffer, this can
lead to OOB read when using kstrtouint. Fix this issue by using
memdup_user_nul instead of memdup_user.

Klassifikation & Betroffenheit:

CWE-476 Linux Linux patch: 5.15.161Linux 61d8658b4a435eac729966cc94cdda077a8df5cd <769b9fd2af02c069451fe9108dba73355d9a021cLinux 61d8658b4a435eac729966cc94cdda077a8df5cd <177f43c6892e6055de6541fe9391a8a3d1f95fc9Linux patch: 5.4.278Linux 61d8658b4a435eac729966cc94cdda077a8df5cd <d0184a375ee797eb657d74861ba0935b6e405c62Linux 61d8658b4a435eac729966cc94cdda077a8df5cd <a75001678e1d38aa607d5b898ec7ff8ed0700d59Linux 4.11Linux patch: 0

NULL Pointer Dereference 🎯 Medium

The product dereferences a pointer that it expects to be valid but is NULL.

🛡️ Empfohlene Mitigation: For any pointers that could have been modified or provided from a function that can return NULL, check the pointer for NULL before use. When working with a multithreaded or otherwise asynchronous environment, ensure that proper locking APIs are used to lock before the check, and unlock when it has finished [REF-1484].

Vollständige Definition bei MITRE ➔

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2024-3184 5.9 CVE-2024-25073 5.9 CVE-2024-35957 5.9 CVE-2024-24783 5.9 CVE-2022-48445 5.9

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 4.19.316 🩹 Kernel ≥ 5.4.278 🩹 Kernel ≥ 5.10.219 🩹 Kernel ≥ 5.15.161 🩹 Kernel ≥ 6.1.93 🩹 Kernel ≥ 6.6.33

🇩🇪 BSI-Sicherheitshinweise: BSI · mittel · Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2024

Veröffentlicht 06/2024

Heute 30.10.

CVSS-Vektor-Analyse: 4.4

AV · Angriffsvektor Lokal

AC · Komplexität Gering

PR · Privilegien Hoch

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Keine

I · Integrität Keine

A · Verfügbarkeit Hoch

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Veröffentlicht:19.06.2024

Aktualisiert:15.10.2026 01:18

Assigner (CNA):Linux

EUVD-ID:EUVD-2024-37422

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-476 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	CVEs	Anteil
≥90 %	743	0,2 %
≥50 %	3.224	0,8 %
≥10 %	22.068	5,8 %
<10 %	354.694	93,2 %

4.4 MEDIUM

EPSS

0.3%

CVE-2024-38559 💻 Lokal 🔐 Admin-Rechte nötig

Linux

CVE-2024-38559 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user.

CWE-476 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

vor 2 Jahren ↻ vor 15 Tagen

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub