AZL-47261
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-47261.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-47261
- Upstream
- Published
- 2024-06-19T14:15:17Z
- Modified
- 2026-04-01T05:17:00.107412Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2024-38577 affecting package kernel for versions less than 5.15.167.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rcu-tasks: Fix showrcutaskstracegp_kthread buffer overflow
There is a possibility of buffer overflow in showrcutaskstracegp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed for this are unrealistically high, but buffer overflow is still possible.
Use snprintf() with buffer size instead of sprintf().
Found by Linux Verification Center (linuxtesting.org) with SVACE.
- References