{"id":"CVE-2024-25739","revision":"fbf8ce17bb874d82ace0a7aef70ce749","records":[{"revision":"fbf8ce17bb874d82ace0a7aef70ce749","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-25739","aliases":[],"title":"create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.","description":"create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.","state":0,"publishedAt":"2024-02-12T00:00:00+00:00","modifiedAt":"2026-10-15T00:38:14.739+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.spinics.net/lists/kernel/msg5074816.html","https://groups.google.com/g/syzkaller/c/Xl97YcQA4hg","https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=68a24aba7c593eafa8fd00f2f76407b9b32b47a9","https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","https://web.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/mtd/ubi/vtbl.c?h=v6.6.24&id=d1b505c988b7"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-25739","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-25739","identifiers":["CVE-2024-25739"]},"retained":false,"historicalAffected":[]}],"coverage":[]}