CVE-2023-52618

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a potential string overflow in the Linux kernel's block/rnbd-srv module. The dev search path can be as large as PATH MAX, and when copied into full path, which is also PATH MAX sized, there is a risk of truncation. This warning was reported by W=1 builds. The function rnbd srv get full path is involved, and the snprintf function is used with a potential output of up to 254 bytes into a region of size between 0 and 4095. To fix this, the code now unconditionally checks for truncation, similar to the case where "%SESSNAME%" is present.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.