CVE-2023-52464
kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 23, 2024
Updated · June 28, 2026
Description
A flaw was found in the Linux Kernel. An improper buffer size is provided to the strncat function, which may result in an out-of-bounds write, leading to memory corruption or a denial of service.
Statement
Because the functions in question pass as arguments static strings with a known size, none of which exceed the size of the allocated buffer, this flaw is not known to be exploitable under any supported scenario.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is currently available for this vulnerability. Make sure to perform the updates as they become available.
CVSS / CWE
CVSS 3.1 · 2.9CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
CWE-805 · Buffer Access with Incorrect Length Value