Bug 2181330 (CVE-2023-28772) - CVE-2023-28772 kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow
Summary: CVE-2023-28772 kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow
Keywords:
Status: NEW
Alias: CVE-2023-28772
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2212207 2212208
Blocks: 2181331
TreeView+ depends on / blocked
 
Reported: 2023-03-23 17:42 UTC by Pedro Sampaio
Modified: 2024-10-12 08:27 UTC (History)
43 users (show)

Fixed In Version: Kernel 5.14-rc1
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2023:7268 0 None None None 2023-11-15 18:25:21 UTC
Red Hat Product Errata RHBA-2023:7328 0 None None None 2023-11-16 11:38:54 UTC
Red Hat Product Errata RHBA-2023:7338 0 None None None 2023-11-16 18:04:14 UTC
Red Hat Product Errata RHBA-2023:7343 0 None None None 2023-11-20 01:58:44 UTC
Red Hat Product Errata RHBA-2023:7346 0 None None None 2023-11-20 09:25:44 UTC
Red Hat Product Errata RHSA-2023:6901 0 None None None 2023-11-14 15:15:10 UTC
Red Hat Product Errata RHSA-2023:7077 0 None None None 2023-11-14 15:20:44 UTC
Red Hat Product Errata RHSA-2024:0724 0 None None None 2024-02-07 16:30:04 UTC
Red Hat Product Errata RHSA-2024:1404 0 None None None 2024-03-19 17:27:12 UTC

Description Pedro Sampaio 2023-03-23 17:42:54 UTC 
An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.

References:

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3
https://github.com/torvalds/linux/commit/d3b16034a24a112bb83aeb669ac5b9b01f744bb7
https://lkml.kernel.org/r/20210626032156.47889-1-yun.zhou@windriver.com
https://lore.kernel.org/lkml/20210625122453.5e2fe304@oasis.local.home/
Comment 5 errata-xmlrpc 2023-11-14 15:15:07 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:6901 https://access.redhat.com/errata/RHSA-2023:6901
Comment 6 errata-xmlrpc 2023-11-14 15:20:40 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7077 https://access.redhat.com/errata/RHSA-2023:7077
Comment 9 errata-xmlrpc 2024-02-07 16:30:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:0724 https://access.redhat.com/errata/RHSA-2024:0724
Comment 11 errata-xmlrpc 2024-03-19 17:27:09 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1404 https://access.redhat.com/errata/RHSA-2024:1404
Note You need to log in before you can comment on or make changes to this bug.