CVE-2024-42284

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a buffer overflow in the tipc udp addr2str() function in the Linux kernel's TIPC (Transparent Inter Process Communication) protocol implementation. This can occur when an invalid UDP media address is provided, potentially leading to a buffer overflow access in tipc media addr printf(). The vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider modifying the tipc udp addr2str() function to return a non-zero value when an invalid UDP media address is encountered, thus preventing the buffer overflow access in tipc media addr printf().