CVE-2024-42301

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/08/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> dev/parport: fix the array out-of-bounds risk<br /> <br /> Fixed array out-of-bounds issues caused by sprintf<br /> by replacing it with snprintf for safer data copying,<br /> ensuring the destination buffer is not overflowed.<br /> <br /> Below is the stack trace I encountered during the actual issue:<br /> <br /> [ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector:<br /> Kernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport]<br /> [ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm:<br /> QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2<br /> [ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp<br /> [ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun<br /> PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024<br /> [ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace:<br /> [ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0<br /> [ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20<br /> [ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c<br /> [ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc<br /> [ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38<br /> [ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport]

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.19.320 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.282 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.224 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.165 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.103 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.44 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.3 (excluding)