CVE-2024-38587
speakup: Fix sizeof() vs ARRAY_SIZE() bug
Severity Score
"-"
*CVSS v-
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
In the Linux kernel, the following vulnerability has been resolved:
speakup: Fix sizeof() vs ARRAY_SIZE() bug
The "buf" pointer is an array of u16 values. This code should be
using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512),
otherwise it can the still got out of bounds.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Speakup: corrige el error sizeof() vs ARRAY_SIZE() El puntero "buf" es una matriz de valores u16. Este código debería usar ARRAY_SIZE() (que es 256) en lugar de sizeof() (que es 512), de lo contrario aún puede salirse de los límites.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-06-18 CVE Reserved
- 2024-06-19 CVE Published
- 2024-06-20 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (17)
| URL | Tag | Source |
|---|---|---|
| https://git.kernel.org/stable/c/756c5cb7c09e537b87b5d3acafcb101b2ccf394f | Vuln. Introduced | |
| https://git.kernel.org/stable/c/8f6b62125befe1675446923e4171eac2c012959c | Vuln. Introduced | |
| https://git.kernel.org/stable/c/6401038acfa24cba9c28cce410b7505efadd0222 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/0d130158db29f5e0b3893154908cf618896450a8 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/8defb1d22ba0395b81feb963b96e252b097ba76f | Vuln. Introduced | |
| https://git.kernel.org/stable/c/0efb15c14c493263cb3a5f65f5ddfd4603d19a76 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 | Vuln. Introduced |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.19.313 < 4.19.316 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19.313 < 4.19.316" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 5.4.275 < 5.4.278 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4.275 < 5.4.278" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 5.10.216 < 5.10.219 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.10.216 < 5.10.219" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 5.15.157 < 5.15.161 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.15.157 < 5.15.161" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.1.88 < 6.1.93 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.1.88 < 6.1.93" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.6.29 < 6.6.33 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.6.29 < 6.6.33" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.8.8 < 6.8.12 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.8.8 < 6.8.12" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.9 < 6.9.3 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.9 < 6.9.3" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.9 < 6.10 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.9 < 6.10" | en |
Affected
| ||||||