https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:19:33 +0000 https://cve.radiocsirt.org/vuln/cve-2024-42236 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()</p> <p>Userspace provided string &#39;s&#39; could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == &#39;\n&#39;) followed closely by an OOB write in the form `str[0 - 1] = &#39;\0&#39;`.</p> <p>There is already a validating check to catch strings that are too long. Let&#39;s supply an additional check for invalid strings that are too short.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()</p> <p>Userspace provided string &#39;s&#39; could trivially have the length zero. Left unchecked this will firstly result in an OOB read in the form `if (str[0 - 1] == &#39;\n&#39;) followed closely by an OOB write in the form `str[0 - 1] = &#39;\0&#39;`.</p> <p>There is already a validating check to catch strings that are too long. Let&#39;s supply an additional check for invalid strings that are too short.</p> https://cve.radiocsirt.org/vuln/cve-2024-42236