Lucene search

K
cvelistLinuxCVELIST:CVE-2023-52685
HistoryMay 17, 2024 - 2:24 p.m.

CVE-2023-52685 pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()

2024-05-1714:24:47
Linux
raw.githubusercontent.com
6
linux
pstore
overflow

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

In the Linux kernel, the following vulnerability has been resolved:

pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()

In persistent_ram_init_ecc(), on 64-bit arches DIV_ROUND_UP() will return
64-bit value since persistent_ram_zone::buffer_size has type size_t which
is derived from the 64-bit unsigned long, while the ecc_blocks variable
this value gets assigned to has (always 32-bit) int type. Even if that
value fits into int type, an overflow is still possible when calculating
the size_t typed ecc_total variable further below since there’s no cast to
any 64-bit type before multiplication. Declaring the ecc_blocks variable
as size_t should fix this mess…

Found by Linux Verification Center (linuxtesting.org) with the SVACE static
analysis tool.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

Related for CVELIST:CVE-2023-52685