CVE-2024-50131

Medium

Elevated severity or exploit probability.

CVSS base

7.3 HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

EPSS — probability of exploitation (30 days)

0.2%

16.3th percentile

CISA KEV

Not listed

Weakness / dates

CWE-120

Published 2024-11-05 · modified 2026-08-04

CVSS breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Attack Vector	L	Local
Attack Complexity	L	Low
Privileges Required	L	Low
User Interaction	N	None
Scope	U	Unchanged
Confidentiality	H	High
Integrity	L	Low
Availability	H	High

Timeline

2024-11-05 — Published (NVD)
2026-08-04 — Last modified (NVD)

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character when validating the event length strlen() returns a string length excluding the null byte. If the string length equals to the maximum buffer length, the buffer will have no space for the NULL terminating character. This commit checks this condition and returns failure for it.

Affected

linux

References

Official: NVD · CVE.org