CVE-2023-2194

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write issue was found in the Linux kernel's SLIMpro I2C device driver. The data->block[0] variable from userspace was not limited to a value between 0-255 and was used as the size of a memcpy(), possibly writing beyond the end of dma buffer. This could allow a local privileged user to crash the system or potentially achieve code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.