Vulnerability Database

319,195

Total vulnerabilities in the database

CVE-2024-36934

In the Linux kernel, the following vulnerability has been resolved:

bna: ensure the copied buf is NUL terminated

Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.

  • Published: May 30, 2024
  • Updated: Jan 23, 2026
  • CVE: CVE-2024-36934
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 3.3 4.19.314
linux / linux_kernel 4.20 5.4.276
linux / linux_kernel 5.5 5.10.217
linux / linux_kernel 5.11 5.15.159
linux / linux_kernel 5.16 6.1.91
linux / linux_kernel 6.2 6.6.31
linux / linux_kernel 6.7 6.8.10
linux / linux_kernel 6.9-rc1 6.9-rc1.x
linux / linux_kernel 6.9-rc2 6.9-rc2.x
linux / linux_kernel 6.9-rc3 6.9-rc3.x
linux / linux_kernel 6.9-rc4 6.9-rc4.x
linux / linux_kernel 6.9-rc5 6.9-rc5.x
linux / linux_kernel 6.9-rc6 6.9-rc6.x
debian / debian_linux 10.0 10.0.x