CVE-2023-52916

Severity CVSS v4.0:
Pending analysis
Type:
CWE-787 Out-of-bounds Write
Publication date:
06/09/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> media: aspeed: Fix memory overwrite if timing is 1600x900<br /> <br /> When capturing 1600x900, system could crash when system memory usage is<br /> tight.<br /> <br /> The way to reproduce this issue:<br /> 1. Use 1600x900 to display on host<br /> 2. Mount ISO through &amp;#39;Virtual media&amp;#39; on OpenBMC&amp;#39;s web<br /> 3. Run script as below on host to do sha continuously<br /> #!/bin/bash<br /> while [ [1] ];<br /> do<br /> find /media -type f -printf &amp;#39;"%h/%f"\n&amp;#39; | xargs sha256sum<br /> done<br /> 4. Open KVM on OpenBMC&amp;#39;s web<br /> <br /> The size of macro block captured is 8x8. Therefore, we should make sure<br /> the height of src-buf is 8 aligned to fix this issue.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.0 (including) 6.1.120 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6 (excluding)