CVE-2024-50131 tracing: Consider the NULL character when validating the event length
A buffer overflow in the Linux kernel tracing subsystem allows attackers to execute arbitrary code or escalate privileges due to improper null character validation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50131?
CVE-2024-50131 is a high-severity memory corruption vulnerability in Linux kernel, published on 5 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
tracing: Consider the NULL character when validating the event length
strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character.
This commit checks this condition and returns failure for it.
Weakness: CWE-120
Which versions are affected by CVE-2024-50131?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50131?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-50131 being exploited?
There is no known exploitation of CVE-2024-50131 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-52306, AZL-52329, BELL-CVE-2024-50131, DEBIAN-CVE-2024-50131, GHSA-7pjg-f6p5-3g9h, UBUNTU-CVE-2024-50131.