CVE-2024-38559: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-38559 affects the Linux kernel's SCSI QLogic FastLinQ offload FCoE driver (qedf). The vulnerability was discovered and disclosed on June 19, 2024. The issue exists in the qedf_debugfs.c file where a buffer copied from userspace is not properly NUL-terminated before being used with kstrtouint function, potentially leading to an out-of-bounds read (NVD).

The vulnerability stems from using memdup_user() instead of memdup_user_nul() when copying data from userspace. The code allocates a count-sized kernel buffer and copies count bytes from userspace, but doesn't ensure the string is NUL-terminated inside the buffer. This can lead to an out-of-bounds read when the buffer is later processed by kstrtouint(). The issue has been assigned a CVSS v3.1 base score of 4.4 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (CISA-ADP).

The vulnerability could allow an attacker with local access and high privileges to cause an out-of-bounds read in the kernel when interacting with the qedf driver's debugfs interface. This could potentially lead to information disclosure or system crashes (NVD).

The vulnerability requires local access with high privileges to exploit. It has been classified as CWE-476 (NULL Pointer Dereference). There are no known reports of this vulnerability being exploited in the wild (CISA-ADP).

The vulnerability has been fixed by replacing memdup_user() with memdup_user_nul() to ensure proper NUL-termination of the copied buffer. The fix has been implemented in various Linux kernel versions, including 5.15.0-121.131 for Ubuntu 22.04 LTS and 5.4.0-192.212 for Ubuntu 20.04 LTS. Users are advised to update their systems to the patched versions (Ubuntu).