Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52748

f2fs: avoid format-overflow warning

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fs_init_page_array_cache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes into a region of size between 5 and 8 [-Werror=format-overflow=] 1984 | sprintf(slab_name, "f2fs_page_array_entry-%u:%u", MAJOR(dev), MINOR(dev)); | ^~ String "f2fs_page_array_entry-%u:%u" can up to 35. The first "%u" can up to 4 and the second "%u" can up to 7, so total size is "24 + 4 + 7 = 35". slab_name's size should be 35 rather than 32.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 31083031709eea6530f0551d59eecdb2e68265ef to < c041f5ddef00c731c541e00bc8ae97b8c84c682faffected
  • 31083031709eea6530f0551d59eecdb2e68265ef to < e4088d7d8f1123006d46a42edf51b8c960a58ef9affected
  • 31083031709eea6530f0551d59eecdb2e68265ef to < 526dd7540a09ecf87b5f54f3ab4e0a2528f25a79affected
  • 31083031709eea6530f0551d59eecdb2e68265ef to < 6fca08fd3085253b48fcb1bd243a0a5e18821a00affected
  • 31083031709eea6530f0551d59eecdb2e68265ef to < 3eebe636cac53886bd5d1cdd55e082ec9e84983faffected
  • 31083031709eea6530f0551d59eecdb2e68265ef to < e0d4e8acb3789c5a8651061fbab62ca24a45c063affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.202 to ≤ 5.10.*unaffected
  • 5.15.140 to ≤ 5.15.*unaffected
  • 6.1.64 to ≤ 6.1.*unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References