CVE-2024-43839

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

published August 17, 2024

CVSS
—
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bna: adjust 'name' buf size of bna_tcb and bna_ccb structures

To have enough space to write all possible sprintf() args. Currently

'name' size is 16, but the first '%s' specifier may already need at

least 16 characters, since 'bnad->netdev->name' is used there.

For '%d' specifiers, assume that they require:

* 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8

* 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX

is 16

And replace sprintf with snprintf.

Detected using the static analysis tool - Svace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.0th percentile
Published
2024-08-17T09:21Z
EPSS history
Timeline
  • 17 AUG 09:21Z
    bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
    cvelistv5