CVE Database›Document archive›CVE-2023-52464

CVE-2023-52464

kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c

Loading…

Severity

Low

Red Hat Product Security

2.9

CVSS 3.1

Review impact separately from score.

Published · February 23, 2024

Updated · June 28, 2026

Description

A flaw was found in the Linux Kernel. An improper buffer size is provided to the strncat function, which may result in an out-of-bounds write, leading to memory corruption or a denial of service.

Statement

Because the functions in question pass as arguments static strings with a known size, none of which exceed the size of the allocated buffer, this flaw is not known to be exploitable under any supported scenario.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is currently available for this vulnerability. Make sure to perform the updates as they become available.

CVSS / CWE

CVSS 3.1 · 2.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L

CWE-805 · Buffer Access with Incorrect Length Value