CVE-2024-38560

HighCVSS 7.1/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: bfa: Ensure the copied buf is NUL terminated

Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 481fc0c8617304a67649027c4a44723a139a0462; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 595a6b98deec01b6dbb20139f71edcd5fb760ec2; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 00b425ff0891283207d7bad607a2412225274d7a; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 1708e3cf2488788cba5489e4f913d227de757baf; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 7d3e694c4fe30f3aba9cd5ae86fb947a54c3db5c; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 204714e68015d6946279719fd464ecaf57240f35; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 7510fab46b1cbd1680e2a096e779aec3334b4143; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < ecb76200f5557a2886888aaa53702da1ab9e6cdf; >= 9f30b674759b9a2da25aefe25d885161d8a911cb, < 13d0cecb4626fae67c00c84d3c7851f6b62f7df3
LinuxLinux3.19
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1

References

Timeline

Published
Jun 19, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-385617.0In the Linux kernel, the following vulnerability has been resolved: kunit: Fix kthread reference There is a race condition when a kthread CVE-2024-385627.8In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: Avoid address calculations via out of bounds array indexCVE-2024-385635.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix potential memory leakage when reading chip tempCVE-2024-385645.5In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CCVE-2024-385655.5In the Linux kernel, the following vulnerability has been resolved: wifi: ar5523: enable proper endpoint verification Syzkaller reports [1CVE-2024-385665.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes thCVE-2024-385675.5In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: add a proper sanity check for endpoints Syzkaller repoCVE-2024-385687.8In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event grouCVE-2024-385697.8In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event groupCVE-2024-38577.8The JIT created incorrect code for arguments in certain cases. This led to potential use-after-free crashes during garbage collection. This CVE-2024-385707.8In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspaCVE-2024-385715.5In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/tsens: Fix null pointer dereference compute_intercept_