Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fix strbuf array overflow The values of the variables xres and yres are placed in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters and a space if the array contains non-digit characters. Then, when executing sprintf(strbuf, "%ux%ux8", xres, yres); more than 16 bytes will be written to strbuf. It is suggested to increase the size of the strbuf array to 24. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 433c84c8495008922534c5cafdae6ff970fb3241affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 57c4f4db0a194416da237fd09dad9527e00cb587affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 252f147b1826cbb30ae0304cf86b66d3bb12b743affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 41cf6f26abe4f491b694c54bd1aa2530369b7510affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 889304120ecb2ca30674d89cd4ef15990b6a571caffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 688872c4ea4a528cd6a057d545c83506b533ee1faffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 11c0d49093b82f6c547fd419c41a982d26bdf5efaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9cf14f5a2746c19455ce9cb44341b5527b5e19c3affected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.227 to ≤ 5.10.*unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.57 to ≤ 6.6.*unaffected6.11.4 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/433c84c8495008922534c5cafdae6ff970fb3241 ↗
- https://git.kernel.org/stable/c/57c4f4db0a194416da237fd09dad9527e00cb587 ↗
- https://git.kernel.org/stable/c/252f147b1826cbb30ae0304cf86b66d3bb12b743 ↗
- https://git.kernel.org/stable/c/41cf6f26abe4f491b694c54bd1aa2530369b7510 ↗
- https://git.kernel.org/stable/c/889304120ecb2ca30674d89cd4ef15990b6a571c ↗
- https://git.kernel.org/stable/c/688872c4ea4a528cd6a057d545c83506b533ee1f ↗
- https://git.kernel.org/stable/c/11c0d49093b82f6c547fd419c41a982d26bdf5ef ↗
- https://git.kernel.org/stable/c/9cf14f5a2746c19455ce9cb44341b5527b5e19c3 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗