Vulnerability CVE-2024-38541 after patching gateway

Products

• CA API Gateway

Issue/Introduction

After patching gateway with latest patch monthly platform patch for January vulnerability called out 

Not addressed by Debian 11.0 OR Debian 12
https://security-tracker.debian.org/tracker/CVE-2024-38541

 

Environment

Gateway 11.1

Resolution

Vulnerability is addressed in Monthly Platform Patch (MPP) May 2025

Layer7_API_PlatformUpdate_64bit_v11.1-Debian-2025-05-26.L7P

CVE readme: module: add buffer overflow check in of_modalias() (CVE-2024-38541)