LIN1022-10680 : Security Advisory - go - CVE-2024-34158
Created: Aug 29, 2024
Updated: Mar 5, 2025
Resolved Date: Feb 27, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.20
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace
Description
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
https://nvd.nist.gov/vuln/detail/CVE-2024-34158
