by Kastro CVE-2024-38623
Linux Linux — fs/ntfs3: Use variable length array instead of fixed size
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Use variable length array instead of fixed size Should fix smatch warning: ntfs_set_label() error: __builtin_memcpy() 'uni->name' too small (20 vs 256)
Affected
ProductAffectedFixed inSource
Linux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e – < a2de301d90b782ac5d7a5fe32995caaee9ab3a0fa2de301d90b782ac5d7a5fe32995caaee9ab3a0fCNA
Linux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e – < 3839a9b19a4b70eff6b6ad70446f639f7fd5a3d73839a9b19a4b70eff6b6ad70446f639f7fd5a3d7CNA
Linux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e – < 1fe1c9dc21ee52920629d2d9b9bd84358931a8d11fe1c9dc21ee52920629d2d9b9bd84358931a8d1CNA
Linux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e – < cceef44b34819c24bb6ed70dce5b524bd3e368d1cceef44b34819c24bb6ed70dce5b524bd3e368d1CNA
Linux4534a70b7056fd4b9a1c6db5a4ce3c98546b291e – < 1997cdc3e727526aa5d84b32f7cbb3f56459b7ef1997cdc3e727526aa5d84b32f7cbb3f56459b7efCNA
Linux5.155.15.161CNA
linux_kernel4534a70b7056 – < a2de301d90b7a2de301d90b7CISA-ADP
linux_kernel4534a70b7056 – < 3839a9b19a4b3839a9b19a4bCISA-ADP
linux_kernel4534a70b7056 – < 1fe1c9dc21ee1fe1c9dc21eeCISA-ADP
linux_kernel4534a70b7056 – < cceef44b3481cceef44b3481CISA-ADP
linux_kernel4534a70b7056 – < 1997cdc3e7271997cdc3e727CISA-ADP
linux_kernel5.15–CISA-ADP
Scores by source
CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Linux (CNA)7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total