CVE-2024-42301CWE-129

CVE-2024-42301

High · published August 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dev/parport: fix the array out-of-bounds risk

Fixed array out-of-bounds issues caused by sprintf

by replacing it with snprintf for safer data copying,

ensuring the destination buffer is not overflowed.

Below is the stack trace I encountered during the actual issue:

[ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector:

Kernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport]

[ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm:

QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2

[ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp

[ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun

PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024

[ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace:

[ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0

[ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20

[ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c

[ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc

[ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38

[ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport]

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-08-17T13:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel< 4.19.3204.19.320
linux/linux_kernel≥ 4.20, < 5.4.2825.4.282
linux/linux_kernel≥ 5.5, < 5.10.2245.10.224
linux/linux_kernel≥ 5.11, < 5.15.1655.15.165
linux/linux_kernel≥ 5.16, < 6.1.1036.1.103
linux/linux_kernel≥ 6.2, < 6.6.446.6.44
linux/linux_kernel≥ 6.7, < 6.10.36.10.3
References (10)
EPSS history
Timeline
  • 17 AUG 09:09Z
    dev/parport: fix the array out-of-bounds risk
    cvelistv5