CVE-2024-38541

CVE-2024-38541 is a critical buffer overflow vulnerability in the Linux kernel's of_modalias() function, affecting Linux systems. This flaw allows an attacker to cause a negative length value and out-of-bounds write if the buffer is too small for the initial snprintf() call. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk with network-based attack vector, low attack complexity, and high impacts on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness and potential future exploitation.