THREAT OPS › Threat News › [NVD] CVE-2024-26736 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved:
afs: Increase buffer size in afs_update_volume_status()
The max length of volume->vid value is 20 characters.
So increase idbuf[] size up to 24 to avoid overflow.
Found by Linux Verification Center (linuxtesti
[NVD] CVE-2024-26736 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow. Found by Linux Verification Center (linuxtesti
CVE-2024-26736 CVSS: 8.1 HIGH Published: 2024-04-03T17:15:51.197
In the Linux kernel, the following vulnerability has been resolved:
afs: Increase buffer size in afs_update_volume_status()
The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[DH: Actually, it's 20 + NUL, so
Indicators of compromise
- CVE-2024-26736cve
- linuxtesting.orgdomain
Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26736