CVE - CVE-2024-36025

CVE-ID
CVE-2024-36025	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison needs to be >= to prevent memory corruption.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/4406e4176f47177f5e51b4cc7e6a7a2ff3dbfbbd URL:https://git.kernel.org/stable/c/4406e4176f47177f5e51b4cc7e6a7a2ff3dbfbbd MISC:https://git.kernel.org/stable/c/60b87b5ecbe07d70897d35947b0bb3e76ccd1b3a URL:https://git.kernel.org/stable/c/60b87b5ecbe07d70897d35947b0bb3e76ccd1b3a MISC:https://git.kernel.org/stable/c/8c820f7c8e9b46238d277c575392fe9930207aab URL:https://git.kernel.org/stable/c/8c820f7c8e9b46238d277c575392fe9930207aab MISC:https://git.kernel.org/stable/c/9fc74e367be4247a5ac39bb8ec41eaa73fade510 URL:https://git.kernel.org/stable/c/9fc74e367be4247a5ac39bb8ec41eaa73fade510 MISC:https://git.kernel.org/stable/c/ea8ac95c22c93acecb710209a7fd10b851afe817 URL:https://git.kernel.org/stable/c/ea8ac95c22c93acecb710209a7fd10b851afe817
Assigning CNA
kernel.org
Date Record Created
20240517	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240517)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)