01 Record

CVE-2024-53142

initramfs: avoid filename buffer overrun

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

initramfs: avoid filename buffer overrun

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.25% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 16.2% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-06 09:37Z1 YR AGO

Last updated

2026-05-11 20:51Z3 MO AGO

Reserved

2024-11-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

e2237afed5090145402efdf10937576250c295567257a7f5164962bd293b5d52

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < bb7ac96670ab1d8d681015f9d66e45dad579af4d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c509b1acbd867d9e09580fe059a924cb5825afb1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d3df9f26cff97beaa5643e551031795d5d5cddbe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6983b8ac787b3add5571cda563574932a59a99bb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f892ddcf9f645380c358e73653cb0900f6bc9eb8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1a423bbbeaf9e3e20c4686501efd9b661fe834db, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 49d01e736c3045319e030d1e75fb983011abaca7, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < fb83b093f75806333b6f4ae29b158d2e0e3ec971, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e017671f534dd3f568db9e47b0583e853d2da9b5, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/bb7ac96670ab1d8d681015f9d66e45dad579af4d
git.kernel.orghttps://git.kernel.org/stable/c/c509b1acbd867d9e09580fe059a924cb5825afb1
git.kernel.orghttps://git.kernel.org/stable/c/d3df9f26cff97beaa5643e551031795d5d5cddbe
git.kernel.orghttps://git.kernel.org/stable/c/6983b8ac787b3add5571cda563574932a59a99bb
git.kernel.orghttps://git.kernel.org/stable/c/f892ddcf9f645380c358e73653cb0900f6bc9eb8
git.kernel.orghttps://git.kernel.org/stable/c/1a423bbbeaf9e3e20c4686501efd9b661fe834db
git.kernel.orghttps://git.kernel.org/stable/c/49d01e736c3045319e030d1e75fb983011abaca7
git.kernel.orghttps://git.kernel.org/stable/c/fb83b093f75806333b6f4ae29b158d2e0e3ec971
git.kernel.orghttps://git.kernel.org/stable/c/e017671f534dd3f568db9e47b0583e853d2da9b5
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-53142

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-53142

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References