Review reviewHigh

CVE-2024-54456

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() name is char[64] where the size of clnt->cl_program->name remains unknown. Invoking strcat() directly will also lead to potential buffer overflow. Change them to strscpy() and strncat() to fix potential issues.

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2025.02.27

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= e13b549319a684dd80c4cc25e9567a5c84007e32 < 19b3ca651b4b473878c73539febe477905041442, >= e13b549319a684dd80c4cc25e9567a5c84007e32 < dd8830779b77f4d1206d28d02ad56a03fc0e78f7, >= e13b549319a684dd80c4cc25e9567a5c84007e32 < e8e0eb5601d4a6c74c336e3710afe3a0348c469d, >= e13b549319a684dd80c4cc25e9567a5c84007e32 < 49fd4e34751e90e6df009b70cd0659dc839e7ca8, >= 6.5, >= 6.5 < 6.6.79, >= 6.7 < 6.12.16, >= 6.13 < 6.13.4
Fixed versions: 6.6.79, 6.12.16, 6.13.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-787