CVE-2024-43839

linux: In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_c...

CVE-2024-43839 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-43839, released August 17, 2024. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0025
17th percentile

In the Linux kernel, the following vulnerability has been resolved: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to write all possible sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16 characters, since 'bnad->netdev->name' is used there. For '%d' specifiers, assume that they require: * 1 char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8 * 2 chars for 'rx_id + rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX is 16 And replace sprintf with snprintf. Detected using the static analysis tool - Svace.

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
bpftool · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
dtb-aarch64 · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-64kb · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-64kb · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-azure · opensuse-leap 15.6 6.4.0-150600.8.11.1 SUSE-SU-2024:3194-1 Sep 10, 2024
kernel-azure · sles 15.6 6.4.0-150600.8.11.1 SUSE-SU-2024:3194-1 Sep 10, 2024
kernel-debug · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-default · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-default · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-default-base · opensuse-leap 15.6 6.4.0-150600.23.22.1.150600.12.8.3 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-default-base · sles 15.6 6.4.0-150600.23.22.1.150600.12.8.3 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-docs · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-docs · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-kvmsmall · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-livepatch-SLE15-SP6-RT_Update_2 · sles 15.6 1-150600.1.3.2 SUSE-SU-2024:3195-1 Sep 10, 2024
kernel-livepatch-SLE15-SP6_Update_4 · sles 15.6 1-150600.13.3.3 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-obs-build · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-obs-build · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-obs-qa · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-rt · opensuse-leap 15.6 6.4.0-150600.10.8.3 SUSE-SU-2024:3195-1 Sep 10, 2024
kernel-rt_debug · opensuse-leap 15.6 6.4.0-150600.10.8.3 SUSE-SU-2024:3195-1 Sep 10, 2024
kernel-source · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-source · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-source-azure · opensuse-leap 15.6 6.4.0-150600.8.11.1 SUSE-SU-2024:3194-1 Sep 10, 2024
kernel-source-azure · sles 15.6 6.4.0-150600.8.11.1 SUSE-SU-2024:3194-1 Sep 10, 2024
kernel-source-rt · opensuse-leap 15.6 6.4.0-150600.10.8.3 SUSE-SU-2024:3195-1 Sep 10, 2024
kernel-syms · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-syms · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-syms-azure · opensuse-leap 15.6 6.4.0-150600.8.11.1 SUSE-SU-2024:3194-1 Sep 10, 2024
kernel-syms-azure · sles 15.6 6.4.0-150600.8.11.1 SUSE-SU-2024:3194-1 Sep 10, 2024
kernel-syms-rt · opensuse-leap 15.6 6.4.0-150600.10.8.1 SUSE-SU-2024:3195-1 Sep 10, 2024
kernel-uek · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek · ol 8 0:5.4.17-2136.336.5.1.el8uek ELSA-2024-12780 Oct 11, 2024
kernel-uek · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-container · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-container · ol 8 0:5.4.17-2136.336.5.1.el7uek ELSA-2024-12782 Oct 14, 2024
kernel-uek-container · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-container-debug · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-container-debug · ol 8 0:5.4.17-2136.336.5.1.el7uek ELSA-2024-12782 Oct 14, 2024
kernel-uek-container-debug · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-core · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-core · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug · ol 8 0:5.4.17-2136.336.5.1.el8uek ELSA-2024-12780 Oct 11, 2024
kernel-uek-debug · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-core · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-core · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-devel · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-devel · ol 8 0:5.4.17-2136.336.5.1.el8uek ELSA-2024-12780 Oct 11, 2024
kernel-uek-debug-devel · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-modules · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-modules · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-modules-extra · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-debug-modules-extra · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-devel · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-devel · ol 8 0:5.4.17-2136.336.5.1.el8uek ELSA-2024-12780 Oct 11, 2024
kernel-uek-devel · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-doc · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-doc · ol 8 0:5.4.17-2136.336.5.1.el8uek ELSA-2024-12780 Oct 11, 2024
kernel-uek-doc · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-modules · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-modules · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-modules-extra · ol 8 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-modules-extra · ol 9 0:5.15.0-302.167.6.el9uek ELSA-2024-12815 Nov 11, 2024
kernel-uek-tools · ol 8 0:5.4.17-2136.336.5.1.el7uek ELSA-2024-12780 Oct 11, 2024
kernel-uek-tools-libs · ol 8 0:5.4.17-2136.336.5.1.el7uek ELSA-2024-12780 Oct 11, 2024
kernel-zfcpdump · opensuse-leap 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
kernel-zfcpdump · sles 15.6 6.4.0-150600.23.22.1 SUSE-SU-2024:3383-1 Sep 23, 2024
linux · Debian 12.15 (bookworm) 6.1.106-1 DEBIAN-CVE-2024-43839 Aug 17, 2024
linux · Debian 13.5 (trixie) 6.10.3-1 DEBIAN-CVE-2024-43839 Aug 17, 2024
linux · Debian 14 6.10.3-1 DEBIAN-CVE-2024-43839 Aug 17, 2024
perf · ol 8 0:5.4.17-2136.336.5.1.el7uek ELSA-2024-12780 Oct 11, 2024
python-perf · ol 8 0:5.4.17-2136.336.5.1.el7uek ELSA-2024-12780 Oct 11, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.