Wind River Support Network

HomeDefectsLIN1021-12141
Fixed

LIN1021-12141 : Security Advisory - linux - CVE-2024-50131

Created: Nov 5, 2024    Updated: May 27, 2025
Resolved Date: May 21, 2025
Found In Version: 10.21.20.1
Fix Version: 10.21.20.25
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Consider the NULL character when validating the event length

strlen() returns a string length excluding the null byte. If the string
length equals to the maximum buffer length, the buffer will have no
space for the NULL terminating character.

This commit checks this condition and returns failure for it.

CREATE(Triage):(User=admin) CVE-2024-50131 (https://nvd.nist.gov/vuln/detail/CVE-2024-50131)

CVEs


Live chat
Online