Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-42284 Details

Description

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: kernel.orgCVSS-B:9.1 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/253405541be2f15ffebdeac2f4cf4b7e9144d12f	kernel.org	Patch
https://git.kernel.org/stable/c/2abe350db1aa599eeebc6892237d0bce0f1de62a	kernel.org	Patch
https://git.kernel.org/stable/c/5eea127675450583680c8170358bcba43227bd69	kernel.org	Patch
https://git.kernel.org/stable/c/728734352743a78b4c5a7285b282127696a4a813	kernel.org	Patch
https://git.kernel.org/stable/c/76ddf84a52f0d8ec3f5db6ccce08faf202a17d28	kernel.org	Patch
https://git.kernel.org/stable/c/7ec3335dd89c8d169e9650e4bac64fde71fdf15b	kernel.org	Patch
https://git.kernel.org/stable/c/aa38bf74899de07cf70b50cd17f8ad45fb6654c8	kernel.org	Patch
https://git.kernel.org/stable/c/fa96c6baef1b5385e2f0c0677b32b3839e716076	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html	CVE
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html	CVE

see all 10 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-754	Improper Check for Unusual or Exceptional Conditions	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 4.1, < 4.19.320 >= 4.20, < 5.4.282 >= 5.5, < 5.10.224 >= 5.11, < 5.15.165 >= 5.16, < 6.1.103
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 3, 2025	CVE Modified	CVE
Aug 19, 2024	Initial Analysis	[email protected]
Aug 19, 2024	CVE Modified	kernel.org
Aug 17, 2024	New CVE Received	kernel.org