In the Linux kernel, the following vulnerability has been resolved:
firewire: nosy: ensure user_length is taken into account when fetching packet contents
Ensure that packetbufferget respects the userlength provided. If the length of the head packet exceeds the userlength, packetbufferget will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67f34f093c0f7bf33f5b4ae64d3d695a3b978285",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-0eb893e7"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38762a0763c10c24a4915feee722d7aa6e73eb98",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-28c5aaa2"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b8c7bd2296e95b38a6ff346242356a2e7190239",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-4982b8ba"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-5b68dc1a"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ee0941da10e8fdcdb34756b877efd3282594c1f",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-5e1e0b2e"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b8c7bd2296e95b38a6ff346242356a2e7190239",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-6bc4ca83"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38762a0763c10c24a4915feee722d7aa6e73eb98",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-6d035ba0"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca330c59c54207567a648357835f59df9a286bb",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-73c8178d"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-7a2d041b"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ee0941da10e8fdcdb34756b877efd3282594c1f",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-86265bd7"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cca330c59c54207567a648357835f59df9a286bb",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-a20d8160"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fe60ee709436550f8cfbab01295936b868d5baa",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-a56465aa"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@67f34f093c0f7bf33f5b4ae64d3d695a3b978285",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-bc084446"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fe60ee709436550f8cfbab01295936b868d5baa",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-c016da6f"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f988d3ffc1aa778fc5181bdfab312e57956c6b",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"97383101962600571084870825285082353434",
"93748200859600280576417542838424536387",
"50261187725028433563737225267089613927",
"295974827758905738258236099403857042970",
"52045517618568193566384230708656524729"
]
},
"deprecated": false,
"target": {
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-df475f40"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f988d3ffc1aa778fc5181bdfab312e57956c6b",
"signature_type": "Function",
"digest": {
"length": 885.0,
"function_hash": "323189255668146944695009152335961261604"
},
"deprecated": false,
"target": {
"function": "packet_buffer_get",
"file": "drivers/firewire/nosy.c"
},
"id": "CVE-2024-27401-e61ca40b"
}
]