{"id":"CVE-2024-36934","revision":"d7dfb02a9000428ea9d8e84374f29237","records":[{"revision":"d7dfb02a9000428ea9d8e84374f29237","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-36934","aliases":[],"title":"bna: ensure the copied buf is NUL terminated","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbna: ensure the copied buf is NUL terminated\n\nCurrently, we allocate a nbytes-sized kernel buffer and copy nbytes from\nuserspace to that buffer. Later, we use sscanf on this buffer but we don't\nensure that the string is terminated inside the buffer, this can lead to\nOOB read when using sscanf. Fix this issue by using memdup_user_nul\ninstead of memdup_user.","state":0,"publishedAt":"2024-05-30T15:29:24.357+00:00","modifiedAt":"2026-10-15T00:42:54.937+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/brocade/bna/bnad_debugfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"bd502ba81cd1d515deddad7dbc6b812b14b97147\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"80578ec10335bc15ac35fd1703c22aab34e39fdd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"6f0f19b79c085cc891c418b768f26f7004bd51a4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"0f560240b4cc25d3de527deb257cdf072c0102a9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"06cb37e2ba6441888f24566a997481d4197b4e32\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"e19478763154674c084defc62ae0d64d79657f91\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"1518b2b498a0109eb6b15755169d3b6607356b35\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"7afc5dbde09104b023ce04465ba71aaba0fc4346\",\n                            \"lessThan\": \"8c34096c7fdf272fd4c0c37fe411cd2e3ed0ee9f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/brocade/bna/bnad_debugfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.3\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.314\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.276\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.217\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.159\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.91\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.31\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8.10\",\n                            \"lessThanOrEqual\": \"6.8.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/bd502ba81cd1d515deddad7dbc6b812b14b97147","https://git.kernel.org/stable/c/80578ec10335bc15ac35fd1703c22aab34e39fdd","https://git.kernel.org/stable/c/6f0f19b79c085cc891c418b768f26f7004bd51a4","https://git.kernel.org/stable/c/0f560240b4cc25d3de527deb257cdf072c0102a9","https://git.kernel.org/stable/c/06cb37e2ba6441888f24566a997481d4197b4e32","https://git.kernel.org/stable/c/e19478763154674c084defc62ae0d64d79657f91","https://git.kernel.org/stable/c/1518b2b498a0109eb6b15755169d3b6607356b35","https://git.kernel.org/stable/c/8c34096c7fdf272fd4c0c37fe411cd2e3ed0ee9f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-36934","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-36934","identifiers":["CVE-2024-36934"]},"retained":false,"historicalAffected":[]}],"coverage":[]}