CVE-2023-53524

A flaw was identified in the Linux kernel’s iwlwifi PCIe driver. In the function iwl_write_to_user_buf()—which is invoked by iwl_dbgfs_monitor_data_read()—an attacker could supply a specially crafted count value (e.g., SIZE_MAX). This leads to an integer overflow when calculating the remaining buffer space, potentially resulting in a negative value that is incorrectly used as a length in a subsequent copy_to_user() call, which can result in a heap overflow condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.