CVE-2024-38576: rcu: Fix buffer overflow in print_cpu_stall_info()

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel6.0 and later · before 6.1.93
• linux linux kernel6.2 and later · before 6.6.33
• linux linux kernel6.7 and later · before 6.8.12
• linux linux kernel6.9 and later · before 6.9.3

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 6.0affected
  • 245a62982502255314b63dd2c4daaedd1cd595a6 and later · before e2228ed3fe7aa838fba87c79a76fb1ad9ea47138affected · git
  • 245a62982502255314b63dd2c4daaedd1cd595a6 and later · before afb39909bfb5c08111f99e21bf5be7505f59ff1caffected · git
  • 245a62982502255314b63dd2c4daaedd1cd595a6 and later · before 9351e1338539cb7f319ffc1210fa9b2aa27384b5affected · git
  • 245a62982502255314b63dd2c4daaedd1cd595a6 and later · before 4c3e2ef4d8ddd313c8ce3ac30505940bea8d6257affected · git
  • 245a62982502255314b63dd2c4daaedd1cd595a6 and later · before 3758f7d9917bd7ef0482c4184c0ad673b4c4e069affected · git
  • before 6.0not affected · semver
  • 6.1.93 and later · up to and including 6.1.*not affected · semver
  • 6.6.33 and later · up to and including 6.6.*not affected · semver
  • 6.8.12 and later · up to and including 6.8.*not affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2024-38574Jun 19, 2024 · libbpf: Prevent null-pointer dereference when prog to load has no BTF
  22Monitor
• ← EarlierCVE-2024-38575Jun 19, 2024 · wifi: brcmfmac: pcie: handle randbuf allocation failure
  22Monitor
• Later →CVE-2024-38577Jun 19, 2024 · rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  31Monitor

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.