{"id":"DEBIAN-CVE-2024-36010","details":"In the Linux kernel, the following vulnerability has been resolved:  igb: Fix string truncation warnings in igb_set_fw_version  Commit 1978d3ead82c (\"intel: fix string truncation warnings\") fixes '-Wformat-truncation=' warnings in igb_main.c by using kasprintf.  drivers/net/ethernet/intel/igb/igb_main.c:3092:53: warning：‘%d’ directive output may be truncated writing between 1 and 5 bytes into a region of size between 1 and 13 [-Wformat-truncation=]  3092 |                                  \"%d.%d, 0x%08x, %d.%d.%d\",       |                                                     ^~ drivers/net/ethernet/intel/igb/igb_main.c:3092:34: note：directive argument in the range [0, 65535]  3092 |                                  \"%d.%d, 0x%08x, %d.%d.%d\",       |                                  ^~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/intel/igb/igb_main.c:3092:34: note：directive argument in the range [0, 65535] drivers/net/ethernet/intel/igb/igb_main.c:3090:25: note：‘snprintf’ output between 23 and 43 bytes into a destination of size 32  kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.  Fix this warning by using a larger space for adapter-\u003efw_version, and then fall back and continue to use snprintf.","modified":"2026-09-15T09:03:14.003401303Z","published":"2024-05-22T12:15:10.660Z","upstream":["CVE-2024-36010"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-36010"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.9-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-36010.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.9-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-36010.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}