Bug 2181330 (CVE-2023-28772) - CVE-2023-28772 kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow
Summary: CVE-2023-28772 kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow
Keywords:
Status: NEW
Alias: CVE-2023-28772
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2212207 2212208
Blocks: 2181331
TreeView+ depends on / blocked
 
Reported: 2023-03-23 17:42 UTC by Pedro Sampaio
Modified: 2023-07-07 08:28 UTC (History)
44 users (show)

Fixed In Version: Kernel 5.14-rc1
Doc Type: If docs needed, set a value
Doc Text:
A buffer overflow write flaw was identified in seq_buf_putmem_hex in lib/seq_buf.c in seq_buf in the Linux Kernel. This issue may allow a user with special debug privileges such as ftrace or root to cause an overflow in the destination buffer due to a missing sanity check.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-03-23 17:42:54 UTC 
An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

References:

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3
https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7
https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou@windriver.com
https://lore.kernel.org/lkml/20210625122453.5e2fe304@oasis.local.home/
Note You need to log in before you can comment on or make changes to this bug.