In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of-bounds string access Enabling -Wstringop-overflow globally exposes a warning for a common bug …
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of-bounds string access Enabling -Wstringop-overflow globally exposes a warning for a common bug in the usage of strncat(): drivers/edac/thunderx_edac.c: In function 'thunderx_ocx_com_threaded_isr': drivers/edac/thunderx_edac.c:1136:17: error: 'strncat' specified bound 1024 equals destination size [-Werror=stringop-overflow=] 1136 | strncat(msg, other, OCX_MESSAGE_SIZE);…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/426fae93c01dffa379225eb2bd4d3cdc42c6eec5 Patch
- https://git.kernel.org/stable/c/475c58e1a471e9b873e3e39958c64a2d278275c8 Patch
- https://git.kernel.org/stable/c/5da3b6e7196f0b4f3728e4e25eb20233a9ddfaf6 Patch
- https://git.kernel.org/stable/c/6aa7865ba7ff7f0ede0035180fb3b9400ceb405a Patch
- https://git.kernel.org/stable/c/700cf4bead80fac994dcc43ae1ca5d86d8959b21 Patch
- https://git.kernel.org/stable/c/71c17ee02538802ceafc830f0736aa35b564e601 Patch
- https://git.kernel.org/stable/c/9dbac9fdae6e3b411fc4c3fca3bf48f70609c398 Patch
- https://git.kernel.org/stable/c/e1c86511241588efffaa49556196f09a498d5057 Patch
- https://git.kernel.org/stable/c/426fae93c01dffa379225eb2bd4d3cdc42c6eec5 Patch
- https://git.kernel.org/stable/c/475c58e1a471e9b873e3e39958c64a2d278275c8 Patch
- https://git.kernel.org/stable/c/5da3b6e7196f0b4f3728e4e25eb20233a9ddfaf6 Patch
- https://git.kernel.org/stable/c/6aa7865ba7ff7f0ede0035180fb3b9400ceb405a Patch
- https://git.kernel.org/stable/c/700cf4bead80fac994dcc43ae1ca5d86d8959b21 Patch
- https://git.kernel.org/stable/c/71c17ee02538802ceafc830f0736aa35b564e601 Patch
- https://git.kernel.org/stable/c/9dbac9fdae6e3b411fc4c3fca3bf48f70609c398 Patch
- https://git.kernel.org/stable/c/e1c86511241588efffaa49556196f09a498d5057 Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD