Description

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() name is char[64] where the size of clnt->cl_program->name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.

INFO

Published Date :

2025-02-27T02:18:08.143Z

Last Modified :

2025-09-03T13:06:46.447Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-54456 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-54456.

URL Resource
https://git.kernel.org/stable/c/19b3ca651b4b473878c73539febe477905041442 cve-icon cve-icon
https://git.kernel.org/stable/c/49fd4e34751e90e6df009b70cd0659dc839e7ca8 cve-icon cve-icon
https://git.kernel.org/stable/c/dd8830779b77f4d1206d28d02ad56a03fc0e78f7 cve-icon cve-icon
https://git.kernel.org/stable/c/e8e0eb5601d4a6c74c336e3710afe3a0348c469d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022602-CVE-2024-54456-e8a9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-54456 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-54456 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact