CVE-2024-50259
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 9, 2024
Updated: Nov 14, 2024
CWE ID 125
Summary
CVE-2024-50259 is a vulnerability impacting the Linux kernel. It was identified during a static analysis of the netdevsim module. The issue stems from a failure to add a trailing zero when copying user-supplied data into a buffer with the copy_from_user() function. If not corrected, this oversight may cause issues when subsequent string operations, such as sscanf(), are performed. The flaw has been rectified by ensuring that the string is correctly terminated with a trailing zero.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX