Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52794

thermal: intel: powerclamp: fix mismatch in get function for max_idle

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: powerclamp: fix mismatch in get function for max_idle KASAN reported this [ 444.853098] BUG: KASAN: global-out-of-bounds in param_get_int+0x77/0x90 [ 444.853111] Read of size 4 at addr ffffffffc16c9220 by task cat/2105 ... [ 444.853442] The buggy address belongs to the variable: [ 444.853443] max_idle+0x0/0xffffffffffffcde0 [intel_powerclamp] There is a mismatch between the param_get_int and the definition of max_idle. Replacing param_get_int with param_get_byte resolves this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ebf519710218814cf827adbf9111af081344c969 to < 6a3866dbdcf39ac93e98708e6abced511733dc18affected
  • ebf519710218814cf827adbf9111af081344c969 to < 0a8585281b11e3a0723bba8d8085d61f0b55f37caffected
  • ebf519710218814cf827adbf9111af081344c969 to < fae633cfb729da2771b5433f6b84ae7e8b4aa5f7affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References