Threats tagged 'ghsa-73xg-5c69-2755'

CVE-2024-53142 is a high-severity vulnerability in the Linux kernel's initramfs handling code where a filename buffer overrun can occur if a cpio archive entry lacks a zero-terminated filename. This flaw can cause the kernel to read uninitialized memory beyond the intended filename, potentially creating files with trailing garbage data. However, exploitation requires the ability to create or modify initramfs entries, which implies full system control, limiting the practical security impact.