Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52762
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2023-52762

2024-05-2100:00:00
ubuntu.com
ubuntu.com
9
linux kernel
cve-2023-52762
virtio-blk
implicit overflow
virtio_max_dma_size
size_t
u32
fix
vulnerability
u32_max
unix

AI Score

6.8

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved:
virtio-blk: fix implicit overflow on virtio_max_dma_size The following
codes have an implicit conversion from size_t to u32: (u32)max_size =
(size_t)virtio_max_dma_size(vdev); This may lead overflow, Ex (size_t)4G ->
(u32)0. Once virtio_max_dma_size() has a larger size than U32_MAX, use
U32_MAX instead.

AI Score

6.8

Confidence

High

EPSS

0

Percentile

15.5%