CVE-2024-56716

netdevsim: prevent bad user input in nsim_dev_health_break_write()

Description

In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsim_dev_health_break_write() If either a zero count or a large one is provided, kernel can crash.

Category

5.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.06%
Affected: Linux Linux
Affected: Linux Linux
Published at:
Updated at:

References

Link Tags
https://git.kernel.org/stable/c/81bdfcd6e6a998e219c9dd49ec7291c2e0594bbc patch
https://git.kernel.org/stable/c/b3a6daaf7cfb2de37b89fd7a5a2ad4ea9aa3e181 patch
https://git.kernel.org/stable/c/d10321be26ff9e9e912697e9e8448099654ff561 patch
https://git.kernel.org/stable/c/470c5ecbac2f19b1cdee2a6ce8d5650c3295c94b patch
https://git.kernel.org/stable/c/8e9ef6bdf71bf25f4735e0230ce1919de8985835 patch
https://git.kernel.org/stable/c/ee76746387f6233bdfa93d7406990f923641568f patch

Frequently Asked Questions

What is the severity of CVE-2024-56716?
CVE-2024-56716 has been scored as a medium severity vulnerability.
How to fix CVE-2024-56716?
To fix CVE-2024-56716, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-56716 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2024-56716 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-56716?
CVE-2024-56716 affects Linux Linux, Linux Linux.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.