CVE-2023-2194

Description

An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->block[0]" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.

CVSS Metrics

• v3.1•MEDIUM•Score: 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 6%

Techniques & Countermeasures

• CWE-787•Out-of-bounds Write

  The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

• fedoraproject•fedora

  38

• linux•linux_kernel

  < 6.3 | 6.3:rc1 | 6.3:rc2 | 6.3:rc3

• redhat•enterprise_linux

  8.0 | 9.0

References (4)

• https://bugzilla.redhat.com/show_bug.cgi?id=2188396
• https://github.com/torvalds/linux/commit/92fbb6d1296f
• https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
• https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html