CVE-2024-53681

Publication date

2025-01-15 13:10:22

Family

Linux

State

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet: Dont overflow subsysnqn nvmet_root_discovery_nqn_store treats the subsysnqn string like a fixed size buffer, even though it is dynamically allocated to the size of the string. Create a new string with kstrndup instead of using the old buffer.