PT-2023-2684
CVE-2023-2194
·
تاريخ النشر
2023-03-16
·
تاريخ التحديث
2026-09-25
الوصف من
CVSS 4.0
8.4
عاليةالمقاييسAV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An out-of-bounds write issue was found in the Linux kernel's SLIMpro I2C device driver. The
data->block[0] variable from userspace was not limited to a value between 0-255 and was used as the size of a memcpy(), possibly writing beyond the end of dma buffer. This could allow a local privileged user to crash the system or potentially achieve code execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾