← CVE Intelligence

CVE-2024-39281

Unbounded allocation in ctl(4) CAM Target Layer PUBLISHED

Description (CNA)

The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator.

Affected (CNA)

Vendor / productVersions
FreeBSD / FreeBSDaffected 14.1-RELEASE before p6; affected 13.4-RELEASE before p2; affected 13.3-RELEASE before p8

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.