CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error
In the Linux kernel, the following vulnerability has been resolved:
tipc: Return non-zero value from tipcudpaddr2str() on error
tipcudpaddr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipcmediaaddrprintf(). Fix this by returning 1 on an invalid UDP media address.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42284?
The severity of CVE-2024-42284 is significant due to the risk of buffer overflow that could lead to system crashes or unauthorized access.
How do I fix CVE-2024-42284?
To fix CVE-2024-42284, update the Linux kernel to a version that includes the patch, specifically to 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which Linux kernel versions are vulnerable to CVE-2024-42284?
Linux kernel versions before 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, and 6.12.11-1 are vulnerable to CVE-2024-42284.
What products are affected by CVE-2024-42284?
CVE-2024-42284 affects various Linux kernel versions, including those listed in the Debian and CPE identifiers.
Is there a workaround for CVE-2024-42284?
There is no specific workaround for CVE-2024-42284; updating to a patched version is the recommended solution.