Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H H H 7.8 .0027 19.4 —
AFFECTED Product Versions Fixed Linux 5d5314d6795f3c1c0f415348ff8c51f7de042b77 – — Linux 2.6.35 – 4.19.316
TIMELINE Jun 25 Reserved by Linux Jul 5 Published (CNA: Linux) Aug 4 RESCORED — CVE-2024-39480 (Linux). CVSS 8.4 → 7.8 (NVD).
In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around.
| Date | Event | Detail |
|---|---|---|
| June 25, 2024 | Reserved | Reserved by Linux |
| July 5, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-39480 (Linux). CVSS 8.4 → 7.8 (NVD). |
Authoritative record: CVE-2024-39480 at cve.org
Vendors: linux
Weaknesses: CWE-121
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-39480 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.