← Database

CVE-2024-38585

HIGH CVSS: 7.1 Published: 2024-06-19 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of heap->len to prevent realloc() from copying an extra sizeof(heap) bytes from beyond the allocated region.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-125

References