CVE-2023-52845

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the use of non-null-terminated strings in the TIPC (Transparent Inter-Process Communication) protocol, which can cause buffer overrun when passed through netlink. This is due to the nla policy for bearer-related names being set to NLA STRING instead of NLA NUL STRING, allowing non-null-terminated strings to be accepted. The patch changes the nla policy to NLA NUL STRING to ensure only null-terminated strings are accepted, resolving the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.