Linux Distros Unpatched Vulnerability : CVE-2023-54065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: realtek: fix out-of-bounds access The probe function sets priv-chipdata to void priv + sizeofpriv with the expectation that priv has enough trailing...

CVE-2023-54065

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: fix out-of-bounds access The probe function sets priv-chipdata to void priv + sizeofpriv with the expectation that priv has enough trailing space. However, only realtek-smi actually allocated this chipdata spac...

CVE-2023-54065

CWE/Issue: Linux kernel net: dsa: realtek: fix out-of-bounds access in realtek-mdio probe. Root cause (as stated): The probe assigns priv->chip_data to (void *)priv + sizeof(*priv), assuming trailing space is available. Only realtek-smi allocated this space; realtek-mdio did not, risking out-o...