https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:18:21 +0000 https://vulnerability.circl.lu/vuln/cve-2024-38559 <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: qedf: Ensure the copied buf is NUL terminated</p> <p>Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don&#39;t ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user.</p> <p><strong>Affected:</strong> Linux, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>scsi: qedf: Ensure the copied buf is NUL terminated</p> <p>Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don&#39;t ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user.</p> https://vulnerability.circl.lu/vuln/cve-2024-38559