CVE Database›Document archive›CVE-2024-56716

CVE-2024-56716

kernel: netdevsim: prevent bad user input in nsim_dev_health_break_write()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 29, 2024

Updated · October 29, 2026

Description

A vulnerability was found in the Linux kernel's netdevsim driver in the nsim_dev_health_break_write() function, where improper handling of zero or large input values leads to a kernel crash. This flaw occurs when the input count is either too small or excessively large, causing system instability, which can result in a denial of service due to the kernel crash.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE not specified