Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52794
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2023-52794

2024-05-2100:00:00
ubuntu.com
ubuntu.com
1
linux kernel
cve-2023-52794
vulnerability
fix
thermal
intel
powerclamp
kasan
mismatch

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
thermal: intel: powerclamp: fix mismatch in get function for max_idle KASAN
reported this [ 444.853098] BUG: KASAN: global-out-of-bounds in
param_get_int+0x77/0x90 [ 444.853111] Read of size 4 at addr
ffffffffc16c9220 by task cat/2105 … [ 444.853442] The buggy address
belongs to the variable: [ 444.853443] max_idle+0x0/0xffffffffffffcde0
[intel_powerclamp] There is a mismatch between the param_get_int and the
definition of max_idle. Replacing param_get_int with param_get_byte
resolves this issue.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

Related for UB:CVE-2023-52794