CVE-2023-52916CWE-787

CVE-2023-52916

High · published September 6, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: aspeed: Fix memory overwrite if timing is 1600x900

When capturing 1600x900, system could crash when system memory usage is

tight.

The way to reproduce this issue:

1. Use 1600x900 to display on host

2. Mount ISO through 'Virtual media' on OpenBMC's web

3. Run script as below on host to do sha continuously

#!/bin/bash

while [ [1] ];

do

find /media -type f -printf '"%h/%f"\n' | xargs sha256sum

done

4. Open KVM on OpenBMC's web

The size of macro block captured is 8x8. Therefore, we should make sure

the height of src-buf is 8 aligned to fix this issue.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-09-06T13:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.0, < 6.1.1206.1.120
linux/linux_kernel≥ 6.2, < 6.66.6
References (3)
EPSS history
Timeline
  • 06 SEP 09:07Z
    media: aspeed: Fix memory overwrite if timing is 1600x900
    cvelistv5