CVE-2024-39480

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> kdb: Fix buffer overflow during tab-complete<br /> <br /> Currently, when the user attempts symbol completion with the Tab key, kdb<br /> will use strncpy() to insert the completed symbol into the command buffer.<br /> Unfortunately it passes the size of the source buffer rather than the<br /> destination to strncpy() with predictably horrible results. Most obviously<br /> if the command buffer is already full but cp, the cursor position, is in<br /> the middle of the buffer, then we will write past the end of the supplied<br /> buffer.<br /> <br /> Fix this by replacing the dubious strncpy() calls with memmove()/memcpy()<br /> calls plus explicit boundary checks to make sure we have enough space<br /> before we start moving characters around.