CVE-2024-38587 - Vulnerability Details

Vendors	Products
Linux	Linux Kernel

Link	Providers
https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b
https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586
https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e
https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358
https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535
https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb
https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996
https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef
https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef
https://lore.kernel.org/linux-cve-announce/2024061950-CVE-2024-38587-46ec@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-38587
https://www.cve.org/CVERecord?id=CVE-2024-38587

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		CWE-129
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}`

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2024-38587", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-06-18T19:36:34.929Z", "datePublished": "2024-06-19T13:37:42.537Z", "dateUpdated": "2024-12-19T09:05:07.557Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T09:05:07.557Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspeakup: Fix sizeof() vs ARRAY_SIZE() bug\n\nThe \"buf\" pointer is an array of u16 values.  This code should be\nusing ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512),\notherwise it can the still got out of bounds."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/accessibility/speakup/main.c"], "versions": [{"version": "756c5cb7c09e537b87b5d3acafcb101b2ccf394f", "lessThan": "42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358", "status": "affected", "versionType": "git"}, {"version": "8f6b62125befe1675446923e4171eac2c012959c", "lessThan": "cd7f3978c2ec741aedd1d860b2adb227314cf996", "status": "affected", "versionType": "git"}, {"version": "6401038acfa24cba9c28cce410b7505efadd0222", "lessThan": "07ef95cc7a579731198c93beed281e3a79a0e586", "status": "affected", "versionType": "git"}, {"version": "0d130158db29f5e0b3893154908cf618896450a8", "lessThan": "504178fb7d9f6cdb0496d5491efb05f45597e535", "status": "affected", "versionType": "git"}, {"version": "89af25bd4b4bf6a71295f07e07a8ae7dc03c6595", "lessThan": "3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e", "status": "affected", "versionType": "git"}, {"version": "8defb1d22ba0395b81feb963b96e252b097ba76f", "lessThan": "c6e1650cf5df1bd6638eeee231a683ef30c7d4eb", "status": "affected", "versionType": "git"}, {"version": "0efb15c14c493263cb3a5f65f5ddfd4603d19a76", "lessThan": "eb1ea64328d4cc7d7a912c563f8523d5259716ef", "status": "affected", "versionType": "git"}, {"version": "c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1", "lessThan": "d52c04474feac8e305814a5228e622afe481b2ef", "status": "affected", "versionType": "git"}, {"version": "c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1", "lessThan": "008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/accessibility/speakup/main.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.316", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.278", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.219", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.161", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.93", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.33", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.12", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9.3", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358"}, {"url": "https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996"}, {"url": "https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586"}, {"url": "https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535"}, {"url": "https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e"}, {"url": "https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb"}, {"url": "https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef"}, {"url": "https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef"}, {"url": "https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b"}], "title": "speakup: Fix sizeof() vs ARRAY_SIZE() bug", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-06-20T14:49:14.118323Z", "id": "CVE-2024-38587", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-04T20:21:08.889Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:12:25.986Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

cveId : CVE-2024-38587 (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

state : PUBLISHED (string)

assignerShortName : Linux (string)

dateReserved : 2024-06-18T19:36:34.929Z (string)

datePublished : 2024-06-19T13:37:42.537Z (string)

dateUpdated : 2024-12-19T09:05:07.557Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2024-12-19T09:05:07.557Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds. (string)

}

]

affected : [ »

0 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : unaffected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : drivers/accessibility/speakup/main.c (string)

]

versions : [ »

0 : { »

version : 756c5cb7c09e537b87b5d3acafcb101b2ccf394f (string)

lessThan : 42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

status : affected (string)

versionType : git (string)

}

1 : { »

version : 8f6b62125befe1675446923e4171eac2c012959c (string)

lessThan : cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

status : affected (string)

versionType : git (string)

}

2 : { »

version : 6401038acfa24cba9c28cce410b7505efadd0222 (string)

lessThan : 07ef95cc7a579731198c93beed281e3a79a0e586 (string)

status : affected (string)

versionType : git (string)

}

3 : { »

version : 0d130158db29f5e0b3893154908cf618896450a8 (string)

lessThan : 504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

status : affected (string)

versionType : git (string)

}

4 : { »

version : 89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 (string)

lessThan : 3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

status : affected (string)

versionType : git (string)

}

5 : { »

version : 8defb1d22ba0395b81feb963b96e252b097ba76f (string)

lessThan : c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

status : affected (string)

versionType : git (string)

}

6 : { »

version : 0efb15c14c493263cb3a5f65f5ddfd4603d19a76 (string)

lessThan : eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

status : affected (string)

versionType : git (string)

}

7 : { »

version : c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 (string)

lessThan : d52c04474feac8e305814a5228e622afe481b2ef (string)

status : affected (string)

versionType : git (string)

}

8 : { »

version : c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 (string)

lessThan : 008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

status : affected (string)

versionType : git (string)

}

]

}

1 : { »

product : Linux (string)

vendor : Linux (string)

defaultStatus : affected (string)

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

programFiles : [ »

0 : drivers/accessibility/speakup/main.c (string)

]

versions : [ »

0 : { »

version : 6.9 (string)

status : affected (string)

}

1 : { »

version : 0 (string)

lessThan : 6.9 (string)

status : unaffected (string)

versionType : semver (string)

}

2 : { »

version : 4.19.316 (string)

lessThanOrEqual : 4.19.* (string)

status : unaffected (string)

versionType : semver (string)

}

3 : { »

version : 5.4.278 (string)

lessThanOrEqual : 5.4.* (string)

status : unaffected (string)

versionType : semver (string)

}

4 : { »

version : 5.10.219 (string)

lessThanOrEqual : 5.10.* (string)

status : unaffected (string)

versionType : semver (string)

}

5 : { »

version : 5.15.161 (string)

lessThanOrEqual : 5.15.* (string)

status : unaffected (string)

versionType : semver (string)

}

6 : { »

version : 6.1.93 (string)

lessThanOrEqual : 6.1.* (string)

status : unaffected (string)

versionType : semver (string)

}

7 : { »

version : 6.6.33 (string)

lessThanOrEqual : 6.6.* (string)

status : unaffected (string)

versionType : semver (string)

}

8 : { »

version : 6.8.12 (string)

lessThanOrEqual : 6.8.* (string)

status : unaffected (string)

versionType : semver (string)

}

9 : { »

version : 6.9.3 (string)

lessThanOrEqual : 6.9.* (string)

status : unaffected (string)

versionType : semver (string)

}

10 : { »

version : 6.10 (string)

lessThanOrEqual : * (string)

status : unaffected (string)

versionType : original_commit_for_fix (string)

}

]

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

}

2 : { »

url : https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

}

5 : { »

url : https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

}

6 : { »

url : https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

}

7 : { »

url : https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef (string)

}

8 : { »

url : https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

}

]

title : speakup: Fix sizeof() vs ARRAY_SIZE() bug (string)

x_generator : { »

engine : bippy-5f407fcff5a0 (string)

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-noinfo Not enough information (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-06-20T14:49:14.118323Z (string)

id : CVE-2024-38587 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-04T20:21:08.889Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:12:25.986Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef (string)

tags : [ »

0 : x_transferred (string)

]

}

8 : { »

url : https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:12:25.986Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-38587", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-20T14:49:14.118323Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-20T14:49:19.666Z"}}], "cna": {"title": "speakup: Fix sizeof() vs ARRAY_SIZE() bug", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "756c5cb7c09e537b87b5d3acafcb101b2ccf394f", "lessThan": "42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358", "versionType": "git"}, {"status": "affected", "version": "8f6b62125befe1675446923e4171eac2c012959c", "lessThan": "cd7f3978c2ec741aedd1d860b2adb227314cf996", "versionType": "git"}, {"status": "affected", "version": "6401038acfa24cba9c28cce410b7505efadd0222", "lessThan": "07ef95cc7a579731198c93beed281e3a79a0e586", "versionType": "git"}, {"status": "affected", "version": "0d130158db29f5e0b3893154908cf618896450a8", "lessThan": "504178fb7d9f6cdb0496d5491efb05f45597e535", "versionType": "git"}, {"status": "affected", "version": "89af25bd4b4bf6a71295f07e07a8ae7dc03c6595", "lessThan": "3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e", "versionType": "git"}, {"status": "affected", "version": "8defb1d22ba0395b81feb963b96e252b097ba76f", "lessThan": "c6e1650cf5df1bd6638eeee231a683ef30c7d4eb", "versionType": "git"}, {"status": "affected", "version": "0efb15c14c493263cb3a5f65f5ddfd4603d19a76", "lessThan": "eb1ea64328d4cc7d7a912c563f8523d5259716ef", "versionType": "git"}, {"status": "affected", "version": "c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1", "lessThan": "d52c04474feac8e305814a5228e622afe481b2ef", "versionType": "git"}, {"status": "affected", "version": "c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1", "lessThan": "008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b", "versionType": "git"}], "programFiles": ["drivers/accessibility/speakup/main.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"status": "unaffected", "version": "0", "lessThan": "6.9", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.316", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.278", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.219", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.161", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.93", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.33", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.8.12", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9.3", "versionType": "semver", "lessThanOrEqual": "6.9.*"}, {"status": "unaffected", "version": "6.10", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/accessibility/speakup/main.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358"}, {"url": "https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996"}, {"url": "https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586"}, {"url": "https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535"}, {"url": "https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e"}, {"url": "https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb"}, {"url": "https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef"}, {"url": "https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef"}, {"url": "https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspeakup: Fix sizeof() vs ARRAY_SIZE() bug\n\nThe \"buf\" pointer is an array of u16 values.  This code should be\nusing ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512),\notherwise it can the still got out of bounds."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T09:05:07.557Z"}}}, "cveMetadata": {"cveId": "CVE-2024-38587", "state": "PUBLISHED", "dateUpdated": "2024-12-19T09:05:07.557Z", "dateReserved": "2024-06-18T19:36:34.929Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-06-19T13:37:42.537Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef (string)

tags : [ »

0 : x_transferred (string)

]

}

8 : { »

url : https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:12:25.986Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-38587 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-06-20T14:49:14.118323Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

description : CWE-noinfo Not enough information (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-20T14:49:19.666Z (string)

}

]

cna : { »

title : speakup: Fix sizeof() vs ARRAY_SIZE() bug (string)

affected : [ »

0 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 756c5cb7c09e537b87b5d3acafcb101b2ccf394f (string)

lessThan : 42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

versionType : git (string)

}

1 : { »

status : affected (string)

version : 8f6b62125befe1675446923e4171eac2c012959c (string)

lessThan : cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

versionType : git (string)

}

2 : { »

status : affected (string)

version : 6401038acfa24cba9c28cce410b7505efadd0222 (string)

lessThan : 07ef95cc7a579731198c93beed281e3a79a0e586 (string)

versionType : git (string)

}

3 : { »

status : affected (string)

version : 0d130158db29f5e0b3893154908cf618896450a8 (string)

lessThan : 504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

versionType : git (string)

}

4 : { »

status : affected (string)

version : 89af25bd4b4bf6a71295f07e07a8ae7dc03c6595 (string)

lessThan : 3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

versionType : git (string)

}

5 : { »

status : affected (string)

version : 8defb1d22ba0395b81feb963b96e252b097ba76f (string)

lessThan : c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

versionType : git (string)

}

6 : { »

status : affected (string)

version : 0efb15c14c493263cb3a5f65f5ddfd4603d19a76 (string)

lessThan : eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

versionType : git (string)

}

7 : { »

status : affected (string)

version : c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 (string)

lessThan : d52c04474feac8e305814a5228e622afe481b2ef (string)

versionType : git (string)

}

8 : { »

status : affected (string)

version : c8d2f34ea96ea3bce6ba2535f867f0d4ee3b22e1 (string)

lessThan : 008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

versionType : git (string)

}

]

programFiles : [ »

0 : drivers/accessibility/speakup/main.c (string)

]

defaultStatus : unaffected (string)

}

1 : { »

repo : https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git (string)

vendor : Linux (string)

product : Linux (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.9 (string)

}

1 : { »

status : unaffected (string)

version : 0 (string)

lessThan : 6.9 (string)

versionType : semver (string)

}

2 : { »

status : unaffected (string)

version : 4.19.316 (string)

versionType : semver (string)

lessThanOrEqual : 4.19.* (string)

}

3 : { »

status : unaffected (string)

version : 5.4.278 (string)

versionType : semver (string)

lessThanOrEqual : 5.4.* (string)

}

4 : { »

status : unaffected (string)

version : 5.10.219 (string)

versionType : semver (string)

lessThanOrEqual : 5.10.* (string)

}

5 : { »

status : unaffected (string)

version : 5.15.161 (string)

versionType : semver (string)

lessThanOrEqual : 5.15.* (string)

}

6 : { »

status : unaffected (string)

version : 6.1.93 (string)

versionType : semver (string)

lessThanOrEqual : 6.1.* (string)

}

7 : { »

status : unaffected (string)

version : 6.6.33 (string)

versionType : semver (string)

lessThanOrEqual : 6.6.* (string)

}

8 : { »

status : unaffected (string)

version : 6.8.12 (string)

versionType : semver (string)

lessThanOrEqual : 6.8.* (string)

}

9 : { »

status : unaffected (string)

version : 6.9.3 (string)

versionType : semver (string)

lessThanOrEqual : 6.9.* (string)

}

10 : { »

status : unaffected (string)

version : 6.10 (string)

versionType : original_commit_for_fix (string)

lessThanOrEqual : * (string)

}

]

programFiles : [ »

0 : drivers/accessibility/speakup/main.c (string)

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

}

1 : { »

url : https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

}

2 : { »

url : https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 (string)

}

3 : { »

url : https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

}

4 : { »

url : https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

}

5 : { »

url : https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

}

6 : { »

url : https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

}

7 : { »

url : https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef (string)

}

8 : { »

url : https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

}

]

x_generator : { »

engine : bippy-5f407fcff5a0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds. (string)

}

]

providerMetadata : { »

orgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

shortName : Linux (string)

dateUpdated : 2024-12-19T09:05:07.557Z (string)

}

cveMetadata : { »

cveId : CVE-2024-38587 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-19T09:05:07.557Z (string)

dateReserved : 2024-06-18T19:36:34.929Z (string)

assignerOrgId : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

datePublished : 2024-06-19T13:37:42.537Z (string)

assignerShortName : Linux (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C3A3E00C-AF83-424B-8A6F-F779432C5C82", "versionEndExcluding": "4.19.316", "versionStartIncluding": "4.19.313", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "466FC42E-75FE-4FDC-82C6-15C3FDE27AE2", "versionEndExcluding": "5.4.278", "versionStartIncluding": "5.4.275", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "148141E6-8BE1-411A-8827-03B1166336F6", "versionEndExcluding": "5.10.219", "versionStartIncluding": "5.10.216", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B654D858-BF90-4D2D-AF2D-A2DD8EC29BA6", "versionEndExcluding": "5.15.161", "versionStartIncluding": "5.15.157", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5EF60D2B-5C71-49D4-92A0-0B21749968AB", "versionEndExcluding": "6.1.93", "versionStartIncluding": "6.1.88", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B20F2535-E6A9-4C11-B5CE-3CE990AD9C22", "versionEndExcluding": "6.6.33", "versionStartIncluding": "6.6.29", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "30D1CFCA-A043-4D33-9686-31B2A044DE2F", "versionEndExcluding": "6.8.12", "versionStartIncluding": "6.8.8", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E07124C1-19E8-4D21-828D-9932A01D3011", "versionEndExcluding": "6.9.3", "versionStartIncluding": "6.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspeakup: Fix sizeof() vs ARRAY_SIZE() bug\n\nThe \"buf\" pointer is an array of u16 values.  This code should be\nusing ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512),\notherwise it can the still got out of bounds."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Speakup: corrige el error sizeof() vs ARRAY_SIZE() El puntero \"buf\" es una matriz de valores u16. Este c\u00f3digo deber\u00eda usar ARRAY_SIZE() (que es 256) en lugar de sizeof() (que es 512), de lo contrario a\u00fan puede salirse de los l\u00edmites."}], "id": "CVE-2024-38587", "lastModified": "2025-04-04T14:44:28.900", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-06-19T14:15:18.800", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-129"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C3A3E00C-AF83-424B-8A6F-F779432C5C82 (string)

versionEndExcluding : 4.19.316 (string)

versionStartIncluding : 4.19.313 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 466FC42E-75FE-4FDC-82C6-15C3FDE27AE2 (string)

versionEndExcluding : 5.4.278 (string)

versionStartIncluding : 5.4.275 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 148141E6-8BE1-411A-8827-03B1166336F6 (string)

versionEndExcluding : 5.10.219 (string)

versionStartIncluding : 5.10.216 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B654D858-BF90-4D2D-AF2D-A2DD8EC29BA6 (string)

versionEndExcluding : 5.15.161 (string)

versionStartIncluding : 5.15.157 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EF60D2B-5C71-49D4-92A0-0B21749968AB (string)

versionEndExcluding : 6.1.93 (string)

versionStartIncluding : 6.1.88 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B20F2535-E6A9-4C11-B5CE-3CE990AD9C22 (string)

versionEndExcluding : 6.6.33 (string)

versionStartIncluding : 6.6.29 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 30D1CFCA-A043-4D33-9686-31B2A044DE2F (string)

versionEndExcluding : 6.8.12 (string)

versionStartIncluding : 6.8.8 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E07124C1-19E8-4D21-828D-9932A01D3011 (string)

versionEndExcluding : 6.9.3 (string)

versionStartIncluding : 6.9 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds. (string)

}

1 : { »

lang : es (string)

value : En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Speakup: corrige el error sizeof() vs ARRAY_SIZE() El puntero "buf" es una matriz de valores u16. Este código debería usar ARRAY_SIZE() (que es 256) en lugar de sizeof() (que es 512), de lo contrario aún puede salirse de los límites. (string)

}

]

id : CVE-2024-38587 (string)

lastModified : 2025-04-04T14:44:28.900 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-06-19T14:15:18.800 (string)

references : [ »

0 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

}

1 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 (string)

}

2 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

}

3 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

}

4 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

}

5 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

}

6 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

}

7 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef (string)

}

8 : { »

source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/008ab3c53bc4f0b2f20013c8f6c204a3203d0b8b (string)

}

10 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/07ef95cc7a579731198c93beed281e3a79a0e586 (string)

}

11 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/3726f75a1ccc16cd335c0ccfad1d92ee08ecba5e (string)

}

12 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/42f0a3f67158ed6b2908d2b9ffbf7e96d23fd358 (string)

}

13 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/504178fb7d9f6cdb0496d5491efb05f45597e535 (string)

}

14 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/c6e1650cf5df1bd6638eeee231a683ef30c7d4eb (string)

}

15 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/cd7f3978c2ec741aedd1d860b2adb227314cf996 (string)

}

16 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/d52c04474feac8e305814a5228e622afe481b2ef (string)

}

17 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

]

url : https://git.kernel.org/stable/c/eb1ea64328d4cc7d7a912c563f8523d5259716ef (string)

}

]

sourceIdentifier : 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-129 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug", "id": "2293401", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293401"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nspeakup: Fix sizeof() vs ARRAY_SIZE() bug\nThe \"buf\" pointer is an array of u16 values.  This code should be\nusing ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512),\notherwise it can the still got out of bounds."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-38587", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-06-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-38587\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-38587\nhttps://lore.kernel.org/linux-cve-announce/2024061950-CVE-2024-38587-46ec@gregkh/T"], "statement": "Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.", "threat_severity": "Moderate"}

{

bugzilla : { »

description : kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug (string)

id : 2293401 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2293401 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-787 (string)

details : [ »

0 : In the Linux kernel, the following vulnerability has been resolved: speakup: Fix sizeof() vs ARRAY_SIZE() bug The "buf" pointer is an array of u16 values. This code should be using ARRAY_SIZE() (which is 256) instead of sizeof() (which is 512), otherwise it can the still got out of bounds. (string)

]

mitigation : { »

lang : en:us (string)

value : Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. (string)

}

name : CVE-2024-38587 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

4 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

5 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : kernel (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

6 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : kernel-rt (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2024-06-19T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-38587 https://nvd.nist.gov/vuln/detail/CVE-2024-38587 https://lore.kernel.org/linux-cve-announce/2024061950-CVE-2024-38587-46ec@gregkh/T (string)

]

statement : Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions. (string)

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object