cve/2024/CVE-2024-25739.md
2024-05-25 21:48:12 +02:00

630 B

CVE-2024-25739

Description

create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

POC

Reference

No PoCs from references.

Github