In the Linux kernel, the following vulnerability has been resolved:
bna: ensure the copied buf is NUL terminated
Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdupusernul instead of memdup_user.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f560240b4cc25d3de527deb257cdf072c0102a9",
"signature_type": "Line",
"id": "CVE-2024-36934-49cd793e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1518b2b498a0109eb6b15755169d3b6607356b35",
"signature_type": "Line",
"id": "CVE-2024-36934-544c4e70",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f0f19b79c085cc891c418b768f26f7004bd51a4",
"signature_type": "Line",
"id": "CVE-2024-36934-57fd969c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd502ba81cd1d515deddad7dbc6b812b14b97147",
"signature_type": "Line",
"id": "CVE-2024-36934-5c5710f5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@06cb37e2ba6441888f24566a997481d4197b4e32",
"signature_type": "Line",
"id": "CVE-2024-36934-6b600df7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@80578ec10335bc15ac35fd1703c22aab34e39fdd",
"signature_type": "Line",
"id": "CVE-2024-36934-8ccd6bfc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e19478763154674c084defc62ae0d64d79657f91",
"signature_type": "Line",
"id": "CVE-2024-36934-9bd2515d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c34096c7fdf272fd4c0c37fe411cd2e3ed0ee9f",
"signature_type": "Line",
"id": "CVE-2024-36934-e3d9c5bc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216051564294852705009377660343841460441",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"325728342768876301477897107381263426685",
"212507433920592584933044324191636487456",
"121716116024212798632497093570799060000",
"312032348103551030656628048595253244142",
"210134564651157930101593632011472815906"
]
},
"signature_version": "v1",
"target": {
"file": "drivers/net/ethernet/brocade/bna/bnad_debugfs.c"
},
"deprecated": false
}
]