CVE-2024-27401
In the Linux kernel, the following vulnerability has been resolved:
firewire: nosy: ensure user_length is taken into ac
In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.
HIGH · CVSS 7.1
EPSS 0.0001
Schedule remediation
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0