CVE-2024-53681

nvmet: Don't overflow subsysnqn

published January 15, 2025

CVSS
—
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvmet: Don't overflow subsysnqn

nvmet_root_discovery_nqn_store treats the subsysnqn string like a fixed

size buffer, even though it is dynamically allocated to the size of the

string.

Create a new string with kstrndup instead of using the old buffer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Published
2025-01-15T13:10Z
EPSS history
Timeline
  • 15 JAN 13:10Z
    nvmet: Don't overflow subsysnqn
    cvelistv5