CVE - CVE-2023-52868

CVE-ID
CVE-2023-52868	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97 URL:https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97 MISC:https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb URL:https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb MISC:https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c URL:https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c MISC:https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c URL:https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c MISC:https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521 URL:https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521 MISC:https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8 URL:https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8 MISC:https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8 URL:https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8 MISC:https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5 URL:https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5 MISC:https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686 URL:https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.