CVE-2023-54057: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrsacpihid command-line parameter
The 'acpiid' buffer in the parseivrsacpihid function may overflow, because the string specifier in the format string sscanf() has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54057?
CVE-2023-54057 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-54057?
To fix CVE-2023-54057, it is recommended to update to the latest version of the Linux kernel where the vulnerability has been resolved.
What does CVE-2023-54057 affect?
CVE-2023-54057 affects the Linux kernel due to a potential buffer overflow in the parse_ivrs_acpihid function.
What type of vulnerability is CVE-2023-54057?
CVE-2023-54057 is a buffer overflow vulnerability related to the ivrs_acpihid command-line parameter in the Linux kernel.
Is CVE-2023-54057 exploitable?
Yes, CVE-2023-54057 can be exploited to potentially cause denial of service or other unintended behaviors within the affected systems.