NA

CVE-2024-27401

Published: 14/05/2024 Updated: 17/05/2024

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_length is taken into account when fetching packet contents Ensure that packet_buffer_get respects the user_length provided. If the length of the head packet exceeds the user_length, packet_buffer_get will now return 0 to signify to the user that no data were read and a larger buffer size is required. Helps prevent user space overflows.

Vulnerability Trend

Github Repositories

Playing with FireWire - CVE-2023-3159 and CVE-2024-27401 FireWire, also known as IEEE 1394, is a robust serial bus interface standard that revolutionized high-speed communications and isochronous real-time data transfer when it was introduced by Apple Inc in the late 1980s and standardized by the IEEE in 1995 Designed to simplify the chaotic sea of cables behind computers, Fi