Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-50074— parport: Proper fix for array out-of-bounds access

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在处理数组越界访问时使用了错误的函数，导致潜在的越界访问问题。

CVSS 7.8 · High EPSS 0.24% · P14

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 26

VendorProduct Version RangeStatus
Linux Linux 166a0bddcc27de41fe13f861c8348e8e53e988c8< 8aadef73ba3b325704ed5cfc4696a25c350182cf affected
47b3dce100778001cd76f7e9188944b5cb27a76d< b0641e53e6cb937487b6cfb15772374f0ba149b3 affected
a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0< 1826b6d69bbb7f9ae8711827facbb2ad7f8d0aaa affected
c719b393374d3763e64900ee19aaed767d5a08d6< 440311903231c6e6c9bcf8acb6a2885a422e00bc affected
7f4da759092a1a6ce35fb085182d02de8cc4cc84< fca048f222ce9dcbde5708ba2bf81d85a4a27952 affected
b579ea3516c371ecf59d073772bc45dfd28c8a0e< 66029078fee00646e2e9dbb8f41ff7819f8e7569 affected
ab11dac93d2d568d151b1918d7b84c2d02bacbd5< 2a8b26a09c8e3ea03da1ef3cd0ef6b96e559fba6 affected
ab11dac93d2d568d151b1918d7b84c2d02bacbd5< 02ac3a9ef3a18b58d8f3ea2b6e46de657bf6c4f9 affected
… +18 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-50074

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
parport: Proper fix for array out-of-bounds access
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds accesses replaced sprintf() calls blindly with snprintf(). However, since snprintf() returns the would-be-printed size, not the actually output size, the length calculation can still go over the given limit. Use scnprintf() instead of snprintf(), which returns the actually output letters, for addressing the potential out-of-bounds access properly.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在处理数组越界访问时使用了错误的函数，导致潜在的越界访问问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 166a0bddcc27de41fe13f861c8348e8e53e988c8 ~ 8aadef73ba3b325704ed5cfc4696a25c350182cf -
Linux Linux 6.11 -

II. Public POCs for CVE-2024-50074

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50074

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-50074 (7)

Same Patch Batch · Linux · 2024-10-29 · 21 CVEs total

CVE-2024-50086 9.8 CRITICAL ksmbd: fix user-after-free from session log off
CVE-2024-50085 9.8 CRITICAL mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
CVE-2024-50075 8.0 HIGH xhci: tegra: fix checked USB2 port number
CVE-2024-50087 7.8 HIGH btrfs: fix uninitialized pointer free on read_alloc_one_name() error
CVE-2024-50073 7.8 HIGH tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
CVE-2024-50077 7.8 HIGH Bluetooth: ISO: Fix multiple init when debugfs is disabled
CVE-2024-50078 7.8 HIGH Bluetooth: Call iso_exit() on module unload
CVE-2024-50082 7.8 HIGH blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
CVE-2024-50088 7.8 HIGH btrfs: fix uninitialized pointer free in add_inode_ref()
CVE-2024-50081 blk-mq: setup queue ->tag_set before initializing hctx
CVE-2024-50080 ublk: don't allow user copy for unprivileged device
CVE-2024-50079 io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
CVE-2024-50083 tcp: fix mptcp DSS corruption due to large pmtu xmit
CVE-2024-50076 vt: prevent kernel-infoleak in con_font_get()
CVE-2024-50084 net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
CVE-2024-50072 x86/bugs: Use code segment selector for VERW operand
CVE-2024-50071 pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()
CVE-2024-50070 pinctrl: stm32: check devm_kasprintf() returned value
CVE-2024-50069 pinctrl: apple: check devm_kasprintf() returned value
CVE-2024-50068 mm/damon/tests/sysfs-kunit.h: fix memory leak in damon_sysfs_test_add_targets()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-50074

No comments yet

Leave a comment