In the Linux kernel, the following vulnerability has been resolved:
rcu-tasks: Fix showrcutaskstracegp_kthread buffer overflow
There is a possibility of buffer overflow in showrcutaskstracegp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed for this are unrealistically high, but buffer overflow is still possible.
Use snprintf() with buffer size instead of sprintf().
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"id": "CVE-2024-38577-24578bfa",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08186d0c5fb64a1cc4b43e009314ee6b173ed222",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"221374471686414266973772935361666880247",
"338976616449996519154081953744157789481",
"43709231100722164149046892005073408991",
"89713368581571315995745013479714577513"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-38577-2a6b1628",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc5645fddb0ce28492b15520306d092730dffa48",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"221374471686414266973772935361666880247",
"338976616449996519154081953744157789481",
"43709231100722164149046892005073408991",
"89713368581571315995745013479714577513"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-38577-2d11038d",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a240e138071b25944ded0f5b3e357aa99fabcb7",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"221374471686414266973772935361666880247",
"338976616449996519154081953744157789481",
"43709231100722164149046892005073408991",
"89713368581571315995745013479714577513"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-38577-39082a9a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af7b560c88fb420099e29890aa682b8a3efc8784",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 286.0,
"function_hash": "231186976305522279497759274697560692413"
}
},
{
"id": "CVE-2024-38577-4018f09c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17c43211d45f13d1badea3942b76bf16bcc49281",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 293.0,
"function_hash": "303936185593049374231191189908522940743"
}
},
{
"id": "CVE-2024-38577-41a3d869",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@af7b560c88fb420099e29890aa682b8a3efc8784",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"72473581974419099876037619052681586191",
"289410461389218948624720493326954204783",
"302788722925424546846256706702782616752",
"21974265210095480724298140512487325832"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-38577-4a398562",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cc5645fddb0ce28492b15520306d092730dffa48",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 277.0,
"function_hash": "334619903745069682644530849919809522862"
}
},
{
"id": "CVE-2024-38577-6a289ab5",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6593d857ce5b5b802fb73d8091ac9c84b92c1697",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"221374471686414266973772935361666880247",
"338976616449996519154081953744157789481",
"43709231100722164149046892005073408991",
"89713368581571315995745013479714577513"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-38577-8c9e995f",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32d988f48ed287e676a29a15ac30701c35849aec",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 277.0,
"function_hash": "334619903745069682644530849919809522862"
}
},
{
"id": "CVE-2024-38577-8e2b23a0",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08186d0c5fb64a1cc4b43e009314ee6b173ed222",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 277.0,
"function_hash": "334619903745069682644530849919809522862"
}
},
{
"id": "CVE-2024-38577-8f689865",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6593d857ce5b5b802fb73d8091ac9c84b92c1697",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 277.0,
"function_hash": "334619903745069682644530849919809522862"
}
},
{
"id": "CVE-2024-38577-a878bbff",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17c43211d45f13d1badea3942b76bf16bcc49281",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"71885821649108114568650432343390336767",
"289410461389218948624720493326954204783",
"302788722925424546846256706702782616752",
"21974265210095480724298140512487325832"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-38577-b9078788",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a240e138071b25944ded0f5b3e357aa99fabcb7",
"target": {
"file": "kernel/rcu/tasks.h",
"function": "show_rcu_tasks_trace_gp_kthread"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 277.0,
"function_hash": "334619903745069682644530849919809522862"
}
},
{
"id": "CVE-2024-38577-ef4b0177",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32d988f48ed287e676a29a15ac30701c35849aec",
"target": {
"file": "kernel/rcu/tasks.h"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"221374471686414266973772935361666880247",
"338976616449996519154081953744157789481",
"43709231100722164149046892005073408991",
"89713368581571315995745013479714577513"
],
"threshold": 0.9
}
}
]