In the Linux kernel, the following vulnerability has been resolved:
firewire: nosy: ensure user_length is taken into account when fetching packet contents
Ensure that packetbufferget respects the userlength provided. If the length of the head packet exceeds the userlength, packetbufferget will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.
[ { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67f34f093c0f7bf33f5b4ae64d3d695a3b978285", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-0eb893e7" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38762a0763c10c24a4915feee722d7aa6e73eb98", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-28c5aaa2" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b8c7bd2296e95b38a6ff346242356a2e7190239", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-4982b8ba" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-5b68dc1a" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ee0941da10e8fdcdb34756b877efd3282594c1f", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-5e1e0b2e" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b8c7bd2296e95b38a6ff346242356a2e7190239", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-6bc4ca83" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38762a0763c10c24a4915feee722d7aa6e73eb98", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-6d035ba0" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca330c59c54207567a648357835f59df9a286bb", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-73c8178d" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-7a2d041b" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ee0941da10e8fdcdb34756b877efd3282594c1f", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-86265bd7" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca330c59c54207567a648357835f59df9a286bb", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-a20d8160" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fe60ee709436550f8cfbab01295936b868d5baa", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-a56465aa" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67f34f093c0f7bf33f5b4ae64d3d695a3b978285", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-bc084446" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fe60ee709436550f8cfbab01295936b868d5baa", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-c016da6f" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f988d3ffc1aa778fc5181bdfab312e57956c6b", "signature_type": "Line", "target": { "file": "drivers/firewire/nosy.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "97383101962600571084870825285082353434", "93748200859600280576417542838424536387", "50261187725028433563737225267089613927", "295974827758905738258236099403857042970", "52045517618568193566384230708656524729" ] }, "id": "CVE-2024-27401-df475f40" }, { "signature_version": "v1", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f988d3ffc1aa778fc5181bdfab312e57956c6b", "signature_type": "Function", "target": { "function": "packet_buffer_get", "file": "drivers/firewire/nosy.c" }, "digest": { "function_hash": "323189255668146944695009152335961261604", "length": 885.0 }, "id": "CVE-2024-27401-e61ca40b" } ]