01 Record

CVE-2024-38541

of: module: add buffer overflow check in of_modalias()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

of: module: add buffer overflow check in of_modalias()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.89% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 56.9% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-06-19 13:35Z2 YR AGO

Last updated

2026-08-05 11:32Z1 MO AGO

Reserved

2024-06-18

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Base
CWE-121Stack-based Buffer OverflowVariant

Data version

5.2

Document digest

b441a1abdc6ad194f0b8f9008b539df42b97bc3c15efdf6fe1d28066a10e0665

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxbc575064d688c8933a6ca51429bea9bc63628d3b to < 46795440ef2b4ac919d09310a69a404c5bc90a88, bc575064d688c8933a6ca51429bea9bc63628d3b to < 733e62786bdf1b2b9dbb09ba2246313306503414, bc575064d688c8933a6ca51429bea9bc63628d3b to < c7f24b7d94549ff4623e8f41ea4d9f5319bd8ac8, bc575064d688c8933a6ca51429bea9bc63628d3b to < 5d59fd637a8af42b211a92b2edb2474325b4d488, bc575064d688c8933a6ca51429bea9bc63628d3b to < 0b0d5701a8bf02f8fee037e81aacf6746558bfd6, bc575064d688c8933a6ca51429bea9bc63628d3b to < ee332023adfd5882808f2dabf037b32d6ce36f9e, bc575064d688c8933a6ca51429bea9bc63628d3b to < e45b69360a63165377b30db4a1dfddd89ca18e9a, bc575064d688c8933a6ca51429bea9bc63628d3b to < cf7385cb26ac4f0ee6c7385960525ad534323252, 4.14—

linuxlinux_kernelbc575064d688 to < 0b0d5701a8bf, bc575064d688 to < ee332023adfd, bc575064d688 to < e45b69360a63, bc575064d688 to < cf7385cb26ac, 4.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/46795440ef2b4ac919d09310a69a404c5bc90a88
git.kernel.orghttps://git.kernel.org/stable/c/733e62786bdf1b2b9dbb09ba2246313306503414
git.kernel.orghttps://git.kernel.org/stable/c/c7f24b7d94549ff4623e8f41ea4d9f5319bd8ac8
git.kernel.orghttps://git.kernel.org/stable/c/5d59fd637a8af42b211a92b2edb2474325b4d488
git.kernel.orghttps://git.kernel.org/stable/c/0b0d5701a8bf02f8fee037e81aacf6746558bfd6
git.kernel.orghttps://git.kernel.org/stable/c/ee332023adfd5882808f2dabf037b32d6ce36f9e
git.kernel.orghttps://git.kernel.org/stable/c/e45b69360a63165377b30db4a1dfddd89ca18e9a
git.kernel.orghttps://git.kernel.org/stable/c/cf7385cb26ac4f0ee6c7385960525ad534323252
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

01 Record index

CVE-2024-38541

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-38541

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References