CVE-2024-27401

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27401
In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa Patch
https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 Patch
https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f Patch
https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c Patch
https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 Patch
https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b Patch
https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 Patch
https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb Patch
https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa Patch
https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 Patch
https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f Patch
https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c Patch
https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 Patch
https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b Patch
https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 Patch
https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
History

22 Jan 2026, 20:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa - () https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa - Patch
References () https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 - () https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 - Patch
References () https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f - () https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f - Patch
References () https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c - () https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c - Patch
References () https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 - () https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 - Patch
References () https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b - () https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b - Patch
References () https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 - () https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 - Patch
References () https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb - () https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html - Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ - Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ - Third Party Advisory
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
First Time Linux
Fedoraproject fedora
Fedoraproject
Debian debian Linux
Debian
Linux linux Kernel
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

21 Nov 2024, 09:04

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ -
References () https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa - () https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa -
References () https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 - () https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98 -
References () https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f - () https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f -
References () https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c - () https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c -
References () https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 - () https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 -
References () https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b - () https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b -
References () https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 - () https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 -
References () https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb - () https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 14:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html -

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

10 Jun 2024, 18:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DW2MIOIMOFUSNLHLRYX23AFR36BMKD65/ -

10 Jun 2024, 16:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OTB4HWU2PTVW5NEYHHLOCXDKG3PYA534/ -

17 May 2024, 11:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firewire: nosy: asegúrese de que se tenga en cuenta la longitud de usuario al recuperar el contenido del paquete. Asegúrese de que paquete_buffer_get respete la longitud de usuario proporcionada. Si la longitud del paquete principal excede la longitud del usuario, paquete_buffer_get ahora devolverá 0 para indicarle al usuario que no se leyeron datos y que se requiere un tamaño de búfer mayor. Ayuda a evitar el desbordamiento del espacio del usuario.
References
  • () https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa -
  • () https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f -
  • () https://git.kernel.org/stable/c/539d51ac48bcfcfa1b3d4a85f8df92fa22c1d41c -
  • () https://git.kernel.org/stable/c/67f34f093c0f7bf33f5b4ae64d3d695a3b978285 -
  • () https://git.kernel.org/stable/c/79f988d3ffc1aa778fc5181bdfab312e57956c6b -
  • () https://git.kernel.org/stable/c/7b8c7bd2296e95b38a6ff346242356a2e7190239 -
  • () https://git.kernel.org/stable/c/cca330c59c54207567a648357835f59df9a286bb -

14 May 2024, 15:12

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 15:12

Updated : 2026-01-22 20:39

NVD link : CVE-2024-27401

Mitre link : CVE-2024-27401

CVE.ORG link : CVE-2024-27401

JSON object : View

Products Affected

debian

  • debian_linux

fedoraproject

  • fedora

linux

  • linux_kernel
CWE
NVD-CWE-noinfo