7.8

CVE-2024-42301: dev/parport: fix the array out-of-bounds risk

Modified
AliasesUBUNTU-CVE-2024-42301DEBIAN-CVE-2024-42301
Published 17-08-2024Last modified 05-08-2026

Vulnerability summary

CVE-2024-42301 is a high (CVSS 7.8) Improper Validation of Array Index vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 14.4% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 46 · Related 38
DLA-3912-1DLA-4008-1MGASA-2024-0309MGASA-2024-0310RHSA-2024:8856RHSA-2024:8870

Timeline

  1. 17-08-2024
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of-bounds risk Fixed array out-of-bounds issues caused by sprintf by replacing it with snprintf for safer data copying, ensuring the destination buffer is not overflowed. Below is the stack trace I encountered during the actual issue: [ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport] [ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm: QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2 [ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp [ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024 [ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace: [ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0 [ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20 [ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c [ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc [ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38 [ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport]

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.23% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu129 products
  • linuxAll versions (No fix recorded) | < 4.4.0-269.303 | < 4.15.0-238.250 | < 5.4.0-200.220 | < 5.15.0-125.135 | < 6.8.0-50.51
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1144.150 | < 4.4.0-1182.197 | < 4.15.0-1181.194 | < 5.4.0-1135.145 | < 5.15.0-1072.78 | < 6.8.0-1020.22
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 166a0bddcc27de41fe13f861c8348e8e53e988c8 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 47b3dce100778001cd76f7e9188944b5cb27a76d | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a44f88f7576bc1916d8d6293f5c62fbe7cbe03e0 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c719b393374d3763e64900ee19aaed767d5a08d6 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7f4da759092a1a6ce35fb085182d02de8cc4cc84 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b579ea3516c371ecf59d073772bc45dfd28c8a0e | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7789a1d6792af410aa9b39a1eb237ed24fa2170a | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ab11dac93d2d568d151b1918d7b84c2d02bacbd5 | 2.6.12
  • linux_kernel< 4.19.320 | ≥ 4.20, < 5.4.282 | ≥ 5.5, < 5.10.224 | ≥ 5.11, < 5.15.165 | ≥ 5.16, < 6.1.103 | ≥ 6.2, < 6.6.44 | ≥ 6.7, < 6.10.3
Debian1 product
  • linux< 6.1.106-1 | < 6.10.3-1

3 vendors · 132 products

References

40 links
Show all 40 references