CVE-2023-53582

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0+ #132

Description A stack-out-of-bounds read issue exists in the brcmfmac component of the Linux kernel. This occurs when a CLM version string, which is not null-terminated, is passed as an argument to the strreplace() function within brcmf c preinit dcmds(). The issue is triggered when the buffer is filled with a CLM version string by memcpy() in brcmf fil iovar data get(). This can lead to a system crash. The issue was discovered through a modified version of syzkaller.

Recommendations Update to a version after 5.14.0+ #132.