[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-53142":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":134,"related":135,"reserved_at":9,"published_at":158,"modified_at":159,"state":160,"summary":161,"references_raw":170,"kevs":217,"epss":218,"epss_history":221,"metrics":492,"affected":498},"CVE-2024-53142","In the Linux kernel, the following vulnerability has been resolved:\n\ninitramfs: avoid filename buffer overrun\n\nThe initramfs filename field is defined in\nDocumentation/driver-api/early-userspace/buffer-format.rst as:\n\n 37 cpio_file := ALGN(4) + cpio_header + filename + \"\\0\" + ALGN(4) + data\n...\n 55 ============= ================== =========================\n 56 Field name    Field size         Meaning\n 57 ============= ================== =========================\n...\n 70 c_namesize    8 bytes            Length of filename, including final \\0\n\nWhen extracting an initramfs cpio archive, the kernel's do_name() path\nhandler assumes a zero-terminated path at @collected, passing it\ndirectly to filp_open() / init_mkdir() / init_mknod().\n\nIf a specially crafted cpio entry carries a non-zero-terminated filename\nand is followed by uninitialized memory, then a file may be created with\ntrailing characters that represent the uninitialized memory. The ability\nto create an initramfs entry would imply already having full control of\nthe system, so the buffer overrun shouldn't be considered a security\nvulnerability.\n\nAppend the output of the following bash script to an existing initramfs\nand observe any created /initramfs_test_fname_overrunAA* path. E.g.\n  ./reproducer.sh | gzip >> /myinitramfs\n\nIt's easiest to observe non-zero uninitialized memory when the output is\ngzipped, as it'll overflow the heap allocated @out_buf in __gunzip(),\nrather than the initrd_start+initrd_size block.\n\n---- reproducer.sh ----\nnilchar=\"A\"\t# change to \"\\0\" to properly zero terminate / pad\nmagic=\"070701\"\nino=1\nmode=$(( 0100777 ))\nuid=0\ngid=0\nnlink=1\nmtime=1\nfilesize=0\ndevmajor=0\ndevminor=1\nrdevmajor=0\nrdevminor=0\ncsum=0\nfname=\"initramfs_test_fname_overrun\"\nnamelen=$(( ${#fname} + 1 ))\t# plus one to account for terminator\n\nprintf \"%s%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%s\" \\\n\t$magic $ino $mode $uid $gid $nlink $mtime $filesize \\\n\t$devmajor $devminor $rdevmajor $rdevminor $namelen $csum $fname\n\ntermpadlen=$(( 1 + ((4 - ((110 + $namelen) & 3)) % 4) ))\nprintf \"%.s${nilchar}\" $(seq 1 $termpadlen)\n---- reproducer.sh ----\n\nSymlink filename fields handled in do_symlink() won't overrun past the\ndata segment, due to the explicit zero-termination of the symlink\ntarget.\n\nFix filename buffer overrun by aborting the initramfs FSM if any cpio\nentry doesn't carry a zero-terminator at the expected (name_len - 1)\noffset.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132],{"_key":25},"SUSE-SU-2024:4367-1",{"_key":27},"SUSE-SU-2025:0035-1",{"_key":29},"SUSE-SU-2025:0201-1",{"_key":31},"SUSE-SU-2024:4388-1",{"_key":33},"SUSE-SU-2025:0201-2",{"_key":35},"SUSE-SU-2025:0202-1",{"_key":37},"SUSE-SU-2025:0203-1",{"_key":39},"SUSE-SU-2025:0229-1",{"_key":41},"SUSE-SU-2025:0230-1",{"_key":43},"SUSE-SU-2025:0231-1",{"_key":45},"SUSE-SU-2025:0289-1",{"_key":47},"SUSE-SU-2025:0117-1",{"_key":49},"SUSE-SU-2025:0153-1",{"_key":51},"SUSE-SU-2025:0154-1",{"_key":53},"DLA-4075-1",{"_key":55},"DLA-4076-1",{"_key":57},"SUSE-SU-2025:20165-1",{"_key":59},"SUSE-SU-2025:20166-1",{"_key":61},"SUSE-SU-2025:20248-1",{"_key":63},"SUSE-SU-2025:20249-1",{"_key":65},"DEBIAN-CVE-2024-53142",{"_key":67},"RHSA-2025:6966",{"_key":69},"UBUNTU-CVE-2024-53142",{"_key":71},"USN-7310-1",{"_key":73},"USN-7387-1",{"_key":75},"USN-7387-2",{"_key":77},"USN-7387-3",{"_key":79},"USN-7388-1",{"_key":81},"USN-7389-1",{"_key":83},"USN-7390-1",{"_key":85},"USN-7391-1",{"_key":87},"USN-7392-1",{"_key":89},"USN-7392-2",{"_key":91},"USN-7392-3",{"_key":93},"USN-7392-4",{"_key":95},"USN-7393-1",{"_key":97},"USN-7401-1",{"_key":99},"USN-7407-1",{"_key":101},"USN-7413-1",{"_key":103},"USN-7421-1",{"_key":105},"USN-7449-1",{"_key":107},"USN-7449-2",{"_key":109},"USN-7450-1",{"_key":111},"USN-7451-1",{"_key":113},"USN-7452-1",{"_key":115},"USN-7453-1",{"_key":117},"USN-7458-1",{"_key":119},"USN-7459-1",{"_key":121},"USN-7459-2",{"_key":123},"USN-7463-1",{"_key":125},"USN-7468-1",{"_key":127},"USN-7523-1",{"_key":129},"USN-7524-1",{"_key":131},"USN-7539-1",{"_key":133},"USN-7540-1",[],[136,137,138,139,140,141,142,143,144,145,146,147,149,151,152,153,154,155,156,157],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":148},"USN-7276-1",{"_key":150},"USN-7277-1",{"_key":47},{"_key":49},{"_key":51},{"_key":57},{"_key":59},{"_key":61},{"_key":63},"2024-12-06T09:37:03.035Z","2026-05-11T20:51:40.152Z","Modified",{"cisa_kev":162,"cisa_ransomware":162,"cisa_vendor":9,"epss_severity":163,"epss_score":164,"severity":165,"severity_score":166,"severity_version":167,"severity_source":168,"severity_vector":169,"severity_status":160},false,"low",0.0002,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[171,177,181,185,189,193,197,201,205,209,213],{"url":172,"sources":173,"tags":175},"https://git.kernel.org/stable/c/bb7ac96670ab1d8d681015f9d66e45dad579af4d",[174,168],"cve.org",[176],"Patch",{"url":178,"sources":179,"tags":180},"https://git.kernel.org/stable/c/c509b1acbd867d9e09580fe059a924cb5825afb1",[174,168],[],{"url":182,"sources":183,"tags":184},"https://git.kernel.org/stable/c/d3df9f26cff97beaa5643e551031795d5d5cddbe",[174,168],[],{"url":186,"sources":187,"tags":188},"https://git.kernel.org/stable/c/6983b8ac787b3add5571cda563574932a59a99bb",[174,168],[],{"url":190,"sources":191,"tags":192},"https://git.kernel.org/stable/c/f892ddcf9f645380c358e73653cb0900f6bc9eb8",[174,168],[],{"url":194,"sources":195,"tags":196},"https://git.kernel.org/stable/c/1a423bbbeaf9e3e20c4686501efd9b661fe834db",[174,168],[176],{"url":198,"sources":199,"tags":200},"https://git.kernel.org/stable/c/49d01e736c3045319e030d1e75fb983011abaca7",[174,168],[176],{"url":202,"sources":203,"tags":204},"https://git.kernel.org/stable/c/fb83b093f75806333b6f4ae29b158d2e0e3ec971",[174,168],[176],{"url":206,"sources":207,"tags":208},"https://git.kernel.org/stable/c/e017671f534dd3f568db9e47b0583e853d2da9b5",[174,168],[176],{"url":210,"sources":211,"tags":212},"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html",[174,168],[],{"url":214,"sources":215,"tags":216},"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",[174,168],[],[],{"date":219,"score":164,"percentile":220},"2026-06-04",0.0564,[222,226,229,232,235,238,241,244,247,250,253,256,259,262,265,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,346,349,352,355,358,361,364,367,370,373,376,379,382,386,388,391,394,397,400,403,406,409,412,415,418,421,424,426,429,432,435,438,441,444,447,450,453,456,459,462,465,468,471,474,477,480,483,486,489],{"date":223,"score":224,"percentile":225},"2025-11-04",0.00034,0.08917,{"date":227,"score":224,"percentile":228},"2025-11-05",0.08927,{"date":230,"score":224,"percentile":231},"2025-11-06",0.09051,{"date":233,"score":224,"percentile":234},"2025-11-07",0.09066,{"date":236,"score":224,"percentile":237},"2025-11-08",0.09064,{"date":239,"score":224,"percentile":240},"2025-11-09",0.09033,{"date":242,"score":224,"percentile":243},"2025-11-10",0.08991,{"date":245,"score":224,"percentile":246},"2025-11-11",0.09016,{"date":248,"score":224,"percentile":249},"2025-11-12",0.09055,{"date":251,"score":224,"percentile":252},"2025-11-13",0.09097,{"date":254,"score":224,"percentile":255},"2025-11-14",0.09137,{"date":257,"score":224,"percentile":258},"2025-11-15",0.09162,{"date":260,"score":224,"percentile":261},"2025-11-16",0.09168,{"date":263,"score":224,"percentile":264},"2025-11-17",0.09157,{"date":266,"score":267,"percentile":268},"2025-11-18",0.00063,0.15442,{"date":270,"score":267,"percentile":271},"2025-11-19",0.15456,{"date":273,"score":267,"percentile":274},"2025-11-20",0.15436,{"date":276,"score":224,"percentile":277},"2025-11-21",0.0923,{"date":279,"score":224,"percentile":280},"2025-11-22",0.09189,{"date":282,"score":224,"percentile":283},"2025-11-23",0.09158,{"date":285,"score":224,"percentile":286},"2025-11-24",0.09144,{"date":288,"score":224,"percentile":289},"2025-11-25",0.09132,{"date":291,"score":224,"percentile":292},"2025-11-26",0.09138,{"date":294,"score":224,"percentile":295},"2025-11-27",0.09149,{"date":297,"score":224,"percentile":298},"2025-11-28",0.09129,{"date":300,"score":224,"percentile":301},"2025-11-29",0.09163,{"date":303,"score":224,"percentile":304},"2025-11-30",0.0917,{"date":306,"score":224,"percentile":307},"2025-12-01",0.09212,{"date":309,"score":224,"percentile":310},"2025-12-02",0.09224,{"date":312,"score":224,"percentile":313},"2025-12-03",0.09254,{"date":315,"score":224,"percentile":316},"2025-12-04",0.0925,{"date":318,"score":224,"percentile":319},"2025-12-05",0.09306,{"date":321,"score":224,"percentile":322},"2025-12-06",0.09318,{"date":324,"score":224,"percentile":325},"2025-12-07",0.09325,{"date":327,"score":224,"percentile":328},"2025-12-08",0.0933,{"date":330,"score":224,"percentile":331},"2025-12-09",0.09387,{"date":333,"score":224,"percentile":334},"2025-12-10",0.09468,{"date":336,"score":224,"percentile":337},"2025-12-11",0.09503,{"date":339,"score":224,"percentile":340},"2025-12-12",0.09524,{"date":342,"score":224,"percentile":343},"2025-12-13",0.09534,{"date":345,"score":224,"percentile":340},"2025-12-14",{"date":347,"score":224,"percentile":348},"2025-12-15",0.09448,{"date":350,"score":224,"percentile":351},"2025-12-16",0.09434,{"date":353,"score":224,"percentile":354},"2025-12-17",0.09521,{"date":356,"score":224,"percentile":357},"2025-12-18",0.09574,{"date":359,"score":224,"percentile":360},"2025-12-19",0.09585,{"date":362,"score":224,"percentile":363},"2025-12-20",0.09582,{"date":365,"score":224,"percentile":366},"2025-12-21",0.09563,{"date":368,"score":224,"percentile":369},"2025-12-22",0.09535,{"date":371,"score":224,"percentile":372},"2025-12-23",0.0949,{"date":374,"score":224,"percentile":375},"2025-12-24",0.09491,{"date":377,"score":224,"percentile":378},"2025-12-25",0.09577,{"date":380,"score":224,"percentile":381},"2025-12-26",0.09565,{"date":383,"score":384,"percentile":385},"2025-12-27",0.00043,0.13212,{"date":387,"score":224,"percentile":381},"2025-12-28",{"date":389,"score":224,"percentile":390},"2025-12-29",0.09528,{"date":392,"score":224,"percentile":393},"2025-12-30",0.09512,{"date":395,"score":224,"percentile":396},"2025-12-31",0.09564,{"date":398,"score":224,"percentile":399},"2026-01-01",0.09605,{"date":401,"score":224,"percentile":402},"2026-01-02",0.09602,{"date":404,"score":224,"percentile":405},"2026-01-03",0.0958,{"date":407,"score":224,"percentile":408},"2026-01-04",0.09506,{"date":410,"score":224,"percentile":411},"2026-01-05",0.09472,{"date":413,"score":224,"percentile":414},"2026-01-06",0.09462,{"date":416,"score":224,"percentile":417},"2026-01-07",0.09497,{"date":419,"score":224,"percentile":420},"2026-01-08",0.09554,{"date":422,"score":224,"percentile":423},"2026-01-09",0.09576,{"date":425,"score":224,"percentile":360},"2026-01-10",{"date":427,"score":224,"percentile":428},"2026-01-11",0.09537,{"date":430,"score":224,"percentile":431},"2026-01-12",0.09518,{"date":433,"score":224,"percentile":434},"2026-01-13",0.09486,{"date":436,"score":164,"percentile":437},"2026-01-14",0.0452,{"date":439,"score":164,"percentile":440},"2026-01-15",0.04438,{"date":442,"score":164,"percentile":443},"2026-01-16",0.04407,{"date":445,"score":164,"percentile":446},"2026-01-17",0.04405,{"date":448,"score":164,"percentile":449},"2026-01-18",0.04382,{"date":451,"score":164,"percentile":452},"2026-01-19",0.04332,{"date":454,"score":164,"percentile":455},"2026-01-20",0.04291,{"date":457,"score":164,"percentile":458},"2026-01-21",0.04283,{"date":460,"score":164,"percentile":461},"2026-01-22",0.04273,{"date":463,"score":164,"percentile":464},"2026-01-23",0.04323,{"date":466,"score":164,"percentile":467},"2026-01-24",0.04367,{"date":469,"score":164,"percentile":470},"2026-01-25",0.04362,{"date":472,"score":164,"percentile":473},"2026-01-26",0.04347,{"date":475,"score":164,"percentile":476},"2026-01-27",0.04333,{"date":478,"score":164,"percentile":479},"2026-01-28",0.04316,{"date":481,"score":164,"percentile":482},"2026-01-29",0.04331,{"date":484,"score":164,"percentile":485},"2026-01-30",0.04334,{"date":487,"score":164,"percentile":488},"2026-01-31",0.04311,{"date":490,"score":164,"percentile":491},"2026-02-01",0.04416,[493],{"source":168,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":494,"cvss_v4_0":9},{"baseScore":166,"baseSeverity":495,"vectorString":169,"impactScore":496,"exploitabilityScore":497},"HIGH",9.8,4.6,[499,537],{"ecosystem":9,"name":500,"vendor":501,"product":501,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":503},"Linux","linux","a",[504,511,514,517,520,523,526,529,532,535],{"version":505,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":509,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C bb7ac96670ab1d8d681015f9d66e45dad579af4d",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","bb7ac96670ab1d8d681015f9d66e45dad579af4d","excluding",{"version":512,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":513,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C c509b1acbd867d9e09580fe059a924cb5825afb1","c509b1acbd867d9e09580fe059a924cb5825afb1",{"version":515,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":516,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C d3df9f26cff97beaa5643e551031795d5d5cddbe","d3df9f26cff97beaa5643e551031795d5d5cddbe",{"version":518,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":519,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 6983b8ac787b3add5571cda563574932a59a99bb","6983b8ac787b3add5571cda563574932a59a99bb",{"version":521,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":522,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C f892ddcf9f645380c358e73653cb0900f6bc9eb8","f892ddcf9f645380c358e73653cb0900f6bc9eb8",{"version":524,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":525,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 1a423bbbeaf9e3e20c4686501efd9b661fe834db","1a423bbbeaf9e3e20c4686501efd9b661fe834db",{"version":527,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":528,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 49d01e736c3045319e030d1e75fb983011abaca7","49d01e736c3045319e030d1e75fb983011abaca7",{"version":530,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":531,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C fb83b093f75806333b6f4ae29b158d2e0e3ec971","fb83b093f75806333b6f4ae29b158d2e0e3ec971",{"version":533,"is_range":506,"range_type":174,"version_start":507,"version_start_type":508,"version_end":534,"version_end_type":510,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C e017671f534dd3f568db9e47b0583e853d2da9b5","e017671f534dd3f568db9e47b0583e853d2da9b5",{"version":536,"is_range":162,"range_type":174,"version_start":536,"version_start_type":508,"version_end":536,"version_end_type":508,"fixed_in":9},"2.6.12",{"ecosystem":9,"name":538,"vendor":501,"product":539,"cpe_part":540,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":541},"linux kernel","linux_kernel","o",[542,546,550,554],{"version":543,"is_range":506,"range_type":544,"version_start":536,"version_start_type":508,"version_end":545,"version_end_type":510,"fixed_in":9},"gte2.6.12_lt4.19.325","cpe","4.19.325",{"version":547,"is_range":506,"range_type":544,"version_start":548,"version_start_type":508,"version_end":549,"version_end_type":510,"fixed_in":9},"gte4.20_lt6.6.64","4.20","6.6.64",{"version":551,"is_range":506,"range_type":544,"version_start":552,"version_start_type":508,"version_end":553,"version_end_type":510,"fixed_in":9},"gte6.7_lt6.11.11","6.7","6.11.11",{"version":555,"is_range":506,"range_type":544,"version_start":556,"version_start_type":508,"version_end":557,"version_end_type":510,"fixed_in":9},"gte6.12_lt6.12.2","6.12","6.12.2"]