In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent a potential integer overflow
If the tag length is >= U32_MAX - 3 then the "length + 4" addition
can result in an integer overflow. Address this by splitting the
decoding into several steps so that decode_cb_compound4res() does
not have to perform arithmetic on the unsafe length value.
Metrics
Affected Vendors & Products
References
History
Wed, 25 Dec 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
| |
Metrics |
threat_severity
|
cvssV3_1
|
Tue, 24 Dec 2024 11:45:00 +0000
![cve-icon](/static/img/cve-icon.png)
Status: PUBLISHED
Assigner: Linux
Published: 2024-12-24T11:28:46.883Z
Updated: 2024-12-24T11:28:46.883Z
Reserved: 2024-11-19T17:17:24.998Z
Link: CVE-2024-53146
![cve-icon](/static/img/cisa-icon.png)
No data.
![cve-icon](/static/img/nvd-icon.png)
Status : Received
Published: 2024-12-24T12:15:22.653
Modified: 2024-12-24T12:15:22.653
Link: CVE-2024-53146
![cve-icon](/static/img/redhat-icon.png)