CVE-2024-53142

CVE-2024-53142 addresses a filename buffer overrun in the Linux kernel's initramfs handling. Specifically, a specially crafted cpio entry with a non-zero-terminated filename could lead to the creation of files with trailing uninitialized memory characters. This vulnerability affects the Linux kernel. The CVSS score of 7.8 (High) indicates a significant impact, with local access required for exploitation (AV:L). While the vulnerability itself is not considered a direct security risk due to the prerequisite of system control to create an initramfs entry, it could lead to information disclosure (C:H) and integrity (I:H) issues by creating files with unexpected names. There is no evidence of active exploitation, nor are there any known public exploit codes available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.