CVE Database
/

CVE-2024-26988

Back to search

CVE-2024-26988

Published: May 1, 2024

Modified: May 12, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: init/main.c: Fix potential static_command_line memory overflow We allocate memory of size 'xlen + strlen(boot_command_line) + 1' for static_command_line, but the strings copied into static_command_line are extra_command_line and command_line, rather than extra_command_line and boot_command_line. When strlen(command_line) > strlen(boot_command_line), static_command_line will overflow. This patch just recovers strlen(command_line) which was miss-consolidated with strlen(boot_command_line) in the commit f5c7310ac73e ("init/main: add checks for the return value of memblock_alloc*()")

VendorProductVersions

Linux

Linux

affected
f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 - < 2ef607ea103616aec0289f1b65d103d499fa903a
affected
f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 - < 0dc727a4e05400205358a22c3d01ccad2c8e1fe4
affected
f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 - < 76c2f4d426a5358fced5d5990744d46f10a4ccea
affected
f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 - < 81cf85ae4f2dd5fa3e43021782aa72c4c85558e8
affected
f5c7310ac73ea270e3a1acdb73d1b4817f11fd67 - < 936a02b5a9630c5beb0353c3085cc49d86c57034

+1 more versions

Linux

Linux

affected
5.1
unaffected
0 - < 5.1
unaffected
5.10.216 - <= 5.10.*
unaffected
5.15.157 - <= 5.15.*
unaffected
6.1.88 - <= 6.1.*

+3 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now