HighFix available
rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of buffer overflow in show_rcu_tasks_trace_gp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed for this are unrealistically high, but buffer overflow is still possible. Use snprintf() with buffer size instead of sprintf(). Found by Linux Verification Center (linuxtesting.org) with SVACE.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.226, 5.15.167, 6.1.93, 6.6.33, 6.8.12, 6.9.3
- CVEs
- CVE-2024-38577
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 00:59 UTC · Revision 1
Source evidence
rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
core-osv · Original sourcePublished 19 Jun 2024, 13:37 UTC
In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of buffer overflow in show_rcu_tasks_trace_gp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed for this are unrealistically high, but buffer overflow is still possible. Use snprintf() with buffer size instead of sprintf(). Found by Linux Verification Center (linuxtesting.org) with SVACE.
osv:CVE-2024-38577
Kernel
Fixed versions: 5.10.226, 5.15.167, 6.1.93, 6.6.33, 6.8.12, 6.9.3
Complete source record
{
"id": "0446949099bc2c294004e721020efb5626b68c53cae930c9bf8f5efc22ca2906",
"url": "https://osv.dev/vulnerability/CVE-2024-38577",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow",
"summary": "In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow There is a possibility of buffer overflow in show_rcu_tasks_trace_gp_kthread() if counters, passed to sprintf() are huge. Counter numbers, needed for this are unrealistically high, but buffer overflow is still possible. Use snprintf() with buffer size instead of sprintf(). Found by Linux Verification Center (linuxtesting.org) with SVACE.",
"evidence": "osv:CVE-2024-38577",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.226",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.167",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.93",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.33",
"evidence": "/affected/1/ranges"
},
{
"value": "6.8.12",
"evidence": "/affected/1/ranges"
},
{
"value": "6.9.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-38577",
"aliases": [
"CVE-2024-38577"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "edf3775f0ad66879796f594983163f672c4bf1a2"
},
{
"fixed": "17c43211d45f13d1badea3942b76bf16bcc49281"
},
{
"fixed": "af7b560c88fb420099e29890aa682b8a3efc8784"
},
{
"fixed": "08186d0c5fb64a1cc4b43e009314ee6b173ed222"
},
{
"fixed": "32d988f48ed287e676a29a15ac30701c35849aec"
},
{
"fixed": "6593d857ce5b5b802fb73d8091ac9c84b92c1697"
},
{
"fixed": "1a240e138071b25944ded0f5b3e357aa99fabcb7"
},
{
"fixed": "cc5645fddb0ce28492b15520306d092730dffa48"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38577.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.8.0"
},
{
"fixed": "5.10.226"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.167"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.93"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.33"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.8.12"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.9.0"
},
{
"fixed": "6.9.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38577.json"
}
}
],
"modified": "2026-10-28T02:30:41.168708316Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/08186d0c5fb64a1cc4b43e009314ee6b173ed222",
"https://git.kernel.org/stable/c/17c43211d45f13d1badea3942b76bf16bcc49281",
"https://git.kernel.org/stable/c/1a240e138071b25944ded0f5b3e357aa99fabcb7",
"https://git.kernel.org/stable/c/32d988f48ed287e676a29a15ac30701c35849aec",
"https://git.kernel.org/stable/c/6593d857ce5b5b802fb73d8091ac9c84b92c1697",
"https://git.kernel.org/stable/c/af7b560c88fb420099e29890aa682b8a3efc8784",
"https://git.kernel.org/stable/c/cc5645fddb0ce28492b15520306d092730dffa48",
"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38577.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-38577",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38577.json"
}
},
"related_cves": [
{
"value": "CVE-2024-38577",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 508835,
"published_at": "2024-06-19T13:37:35.797+00:00"
}