CVE-2024-42284

CriticalCVSS 9.1

Published: 17/08/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

In the Linux kernel's TIPC module, tipc_udp_addr2str() does not return a non-zero value on invalid UDP address, which can lead to buffer overflow in tipc_media_addr_printf(). The fix returns 1 on invalid address.

Risk Assessment

May lead to buffer overflow, potentially causing system crash or remote code execution.

Recommendation

Apply the Linux kernel update that includes the fix for this issue.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.