CVE-2024-23851

kernel: copy_params can attempt to allocate more than INT_MAX bytes and crash

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · January 23, 2024

Updated · November 21, 2025

Description

A vulnerability was found in copy_params in drivers/md/dm-ioctl.c in the Linux kernel, where it can attempt to allocate more than INT_MAX bytes and crash due to a missing param_kernel->data_size check. This issue is related to ctl_ioctl.

Statement

This flaw was found to be a duplicate of CVE-2023-52429. Please see https://access.redhat.com/security/cve/CVE-2023-52429 for information about affected products and security errata.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified