QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-38587

Back to search

CVE-2024-38587

Published: Jun 19, 2024

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds.

VendorProductVersions

Linux

Linux

affected
756c5cb7c09e537b87b5d3acafcb101b2ccf394f - < 42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358
affected
8f6b62125befe1675446923e4171eac2c012959c - < cd7f3978c2ec741aedd1d860b2adb227314cf996
affected
6401038acfa24cba9c28cce410b7505efadd0222 - < 07ef95cc7a579731198c93beed281e3a79a0e586
affected
0d130158db29f5e0b3893154908cf618896450a8 - < 504178fb7d9f6cdb0496d5491efb05f45597e535
affected
89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 - < 3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e

+11 more versions

Linux

Linux

affected
6.9
unaffected
0 - < 6.9
unaffected
4.19.316 - <= 4.19.*
unaffected
5.4.278 - <= 5.4.*
unaffected
5.10.219 - <= 5.10.*

+6 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now