HighFix available
tracing: Consider the NULL character when validating the event length
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character. This commit checks this condition and returns failure for it.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.229, 5.15.170, 5.4.285, 6.1.115, 6.11.6, 6.6.59
- CVEs
- CVE-2024-50131
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 8 Nov 2026, 00:41 UTC · Revision 1
Source evidence
tracing: Consider the NULL character when validating the event length
core-osv · Original sourcePublished 5 Nov 2024, 17:10 UTC
In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character. This commit checks this condition and returns failure for it.
osv:CVE-2024-50131
Kernel
Fixed versions: 5.4.285, 5.10.229, 5.15.170, 6.1.115, 6.6.59, 6.11.6
Complete source record
{
"id": "a1861b98cf6f005d7b52f3ea52ea722938765157f376fc7c9abe42ddf647967b",
"url": "https://osv.dev/vulnerability/CVE-2024-50131",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "tracing: Consider the NULL character when validating the event length",
"summary": "In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character. This commit checks this condition and returns failure for it.",
"evidence": "osv:CVE-2024-50131",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.285",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.229",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.170",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.115",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.59",
"evidence": "/affected/1/ranges"
},
{
"value": "6.11.6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-50131",
"aliases": [
"CVE-2024-50131"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "dec65d79fd269d05427c8167090bfc9c3d0b56c4"
},
{
"fixed": "5e3231b352725ff4a3a0095e6035af674f2d8725"
},
{
"fixed": "02874ca52df2ca2423ba6122039315ed61c25972"
},
{
"fixed": "b86b0d6eea204116e4185acc35041ca4ff11a642"
},
{
"fixed": "f4ed40d1c669bba1a54407d8182acdc405683f29"
},
{
"fixed": "a14a075a14af8d622c576145455702591bdde09d"
},
{
"fixed": "5fd942598ddeed9a212d1ff41f9f5b47bcc990a7"
},
{
"fixed": "0b6e2e22cb23105fcb171ab92f0f7516c69c8471"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50131.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.1.0"
},
{
"fixed": "5.4.285"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.229"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.170"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.115"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.59"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.11.6"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50131.json"
}
}
],
"modified": "2026-10-28T02:30:52.583021663Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
"https://git.kernel.org/stable/c/02874ca52df2ca2423ba6122039315ed61c25972",
"https://git.kernel.org/stable/c/0b6e2e22cb23105fcb171ab92f0f7516c69c8471",
"https://git.kernel.org/stable/c/5e3231b352725ff4a3a0095e6035af674f2d8725",
"https://git.kernel.org/stable/c/5fd942598ddeed9a212d1ff41f9f5b47bcc990a7",
"https://git.kernel.org/stable/c/a14a075a14af8d622c576145455702591bdde09d",
"https://git.kernel.org/stable/c/b86b0d6eea204116e4185acc35041ca4ff11a642",
"https://git.kernel.org/stable/c/f4ed40d1c669bba1a54407d8182acdc405683f29",
"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50131.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50131",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50131.json"
}
},
"related_cves": [
{
"value": "CVE-2024-50131",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 521046,
"published_at": "2024-11-05T17:10:56.981+00:00"
}