Threats tagged 'ghsa-gc72-pc9p-m8wc'

CVE-2024-50259 is a medium-severity vulnerability in the Linux kernel's netdevsim component. It involves missing a trailing zero termination in a string operation within the nsim_nexthop_bucket_activity_write() function. This flaw was identified by a static analyzer and fixed by ensuring a trailing zero is added after copy_from_user() to properly terminate the string before further processing such as sscanf(). The vulnerability does not impact confidentiality or integrity but can cause an availability issue.