CVE-2024-27401

HighCVSS 7.1/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

firewire: nosy: ensure user_length is taken into account when fetching packet contents

Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 286468210d83ce0ca1e37e346ed9f4457a161650, < 67f34f093c0f7bf33f5b4ae64d3d695a3b978285; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < 7b8c7bd2296e95b38a6ff346242356a2e7190239; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < cca330c59c54207567a648357835f59df9a286bb; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < 79f988d3ffc1aa778fc5181bdfab312e57956c6b; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < 4ee0941da10e8fdcdb34756b877efd3282594c1f; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < 1fe60ee709436550f8cfbab01295936b868d5baa; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < 539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c; >= 286468210d83ce0ca1e37e346ed9f4457a161650, < 38762a0763c10c24a4915feee722d7aa6e73eb98
LinuxLinux2.6.36

References

Timeline

Published
May 14, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-274025.8In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protCVE-2024-274035.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: reset dst in route object after setting upCVE-2024-274044.7In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data races on remote_id Similar to the previous patch, addrCVE-2024-274057.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It CVE-2024-274065.5In the Linux kernel, the following vulnerability has been resolved: lib/Kconfig.debug: TEST_IOV_ITER depends on MMU Trying to run the iov_CVE-2024-274077.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mi_enum_attr()CVE-2024-274084.7In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfeCVE-2024-274095.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfeCVE-2024-27417.1Cross-Site Request Forgery (CSRF) vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could CVE-2024-274105.5In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currentlyCVE-2024-274115.5In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau dealCVE-2024-274125.5In the Linux kernel, the following vulnerability has been resolved: power: supply: bq27xxx-i2c: Do not free non existing IRQ The bq27xxx i
CVE-2024-27401: High severity, CVSS 7.1 | Vulnix