CVE-2024-38585 — tools/nolibc/stdlib: fix memory error in realloc()
In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of heap->len to prev…
Published: 2024-06-19 · CVSS: Unscored
In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() instead of heap->len to prevent realloc() from copying an extra sizeof(heap) bytes from beyond the allocated region.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7