Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53165

udf: Fix uninitialized array access for some pathnames

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical impact is that the name may be prepended a "unification hash" when it is not actually needed but still it is good to fix this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < 008ae78d1e12efa904dc819b1ec83e2bca6b2c56affected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < b37f998d357102e8eb0f8eeb33f03fff22e49cbfaffected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < 3f1368af47acf4d0b2a5fb0d2c0d6919d2234b6daffected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < 4503f6fc95d6dee85fb2c54785848799e192c51caffected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < 985f9666698960dfc87a106d6314203fa90fda75affected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < a6824149809395dfbb5bc36bc7057cc3cb84e56daffected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < 4d50988da0db167aed6f38685145cb5cd526c4f8affected
  • 484a10f49387e4386bf2708532e75bf78ffea2cb to < 028f6055c912588e6f72722d89c30b401bbcf013affected

Linux Linux

Default version status: affected

  • 4.6affected
  • 0 to < 4.6unaffected
  • 4.14.324 to ≤ 4.14.*unaffected
  • 4.19.293 to ≤ 4.19.*unaffected
  • 5.4.255 to ≤ 5.4.*unaffected
  • 5.10.192 to ≤ 5.10.*unaffected
  • 5.15.123 to ≤ 5.15.*unaffected
  • 6.1.42 to ≤ 6.1.*unaffected
  • 6.4.7 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References