Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52868

thermal: core: prevent potential string overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < b55f0a9f865be75ca1019aad331f3225f7b50ce8affected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < 6ad1bf47fbe5750c4d5d8e41337665e193e2c521affected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < 3091ab943dfc7b2578599b0fe203350286fab5bbaffected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < 3f795fb35c2d8a637efe76b4518216c9319b998caffected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < 3a8f4e58e1ee707b4f46a1000b40b86ea3dd509caffected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < 77ff34a56b695e228e6daf30ee30be747973d6e8affected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < 0f6b3be28c4d62ef6498133959c72266629bea97affected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < edbd6bbe40ac524a8f2273ffacc53edf14f3c686affected
  • 203d3d4aa482339b4816f131f713e1b8ee37f6dd to < c99626092efca3061b387043d4a7399bf75fbdd5affected

Linux Linux

Default version status: affected

  • 2.6.25affected
  • 0 to < 2.6.25unaffected
  • 4.14.330 to ≤ 4.14.*unaffected
  • 4.19.299 to ≤ 4.19.*unaffected
  • 5.4.261 to ≤ 5.4.*unaffected
  • 5.10.201 to ≤ 5.10.*unaffected
  • 5.15.139 to ≤ 5.15.*unaffected
  • 6.1.63 to ≤ 6.1.*unaffected
  • 6.5.12 to ≤ 6.5.*unaffected
  • 6.6.2 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References