CVE-2023-52612

Summary

In the Linux kernel, the following vulnerability has been resolved:

crypto: scomp - fix req->dst buffer overflow

The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < 1142d65c5b881590962ad763f94505b6dd67d2feaffected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < e0e3f4a18784182cfe34e20c00eca11e78d53e76affected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < 4518dc468cdd796757190515a9be7408adc8911eaffected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < a5f2f91b3fd7387e5102060809316a0f8f0bc625affected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < 4df0c942d04a67df174195ad8082f6e30e7f71a5affected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < 7d9e5bed036a7f9e2062a137e97e3c1e77fb8759affected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < 71c6670f9f032ec67d8f4e3f8db4646bf5a62883affected
LinuxLinux1ab53a77b772bf7369464a0e4fa6fd6499acf8f1 < 744e1885922a9943458954cfea917b31064b4131affected
LinuxLinux4.10affected
LinuxLinux0 < 4.10unaffected
LinuxLinux4.19.306 <= 4.19.*unaffected
LinuxLinux5.4.268 <= 5.4.*unaffected
LinuxLinux5.10.209 <= 5.10.*unaffected
LinuxLinux5.15.148 <= 5.15.*unaffected
LinuxLinux6.1.75 <= 6.1.*unaffected
LinuxLinux6.6.14 <= 6.6.*unaffected
LinuxLinux6.7.2 <= 6.7.*unaffected
LinuxLinux6.8 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References