Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-2194
HistoryApr 20, 2023 - 9:15 p.m.

CVE-2023-2194

2023-04-2021:15:09
Debian Security Bug Tracker
security-tracker.debian.org
5
out-of-bounds write
userspace data
memcpy
dma_buffer
local privileged user
code execution
linux kernel
slimpro i2c driver
vulnerability
crash
system

0.0004 Low

EPSS

Percentile

5.2%

An out-of-bounds write vulnerability was found in the Linux kernel’s SLIMpro I2C device driver. The userspace “data->block[0]” variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.