In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent a potential integer overflow
If the tag length is >= U32_MAX - 3 then the "length + 4" addition
can result in an integer overflow. Address this by splitting the
decoding into several steps so that decode_cb_compound4res() does
not have to perform arithmetic on the unsafe length value.
Metrics
Affected Vendors & Products
References
History
Tue, 07 Jan 2025 17:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Linux
Linux linux Kernel |
|
Weaknesses | CWE-190 | |
CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
Vendors & Products |
Linux
Linux linux Kernel |
Wed, 25 Dec 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
| |
Metrics |
threat_severity
|
cvssV3_1
|
Tue, 24 Dec 2024 11:45:00 +0000

Status: PUBLISHED
Assigner: Linux
Published: 2024-12-24T11:28:46.883Z
Updated: 2025-01-20T06:19:43.545Z
Reserved: 2024-11-19T17:17:24.998Z
Link: CVE-2024-53146

No data.

Status : Analyzed
Published: 2024-12-24T12:15:22.653
Modified: 2025-01-07T17:15:25.477
Link: CVE-2024-53146
