CVE-2023-54057

A stack buffer overflow vulnerability was found in the Linux kernel's AMD IOMMU driver. The parse_ivrs_acpihid() function uses sscanf() to parse the ivrs_acpihid kernel command-line parameter without specifying a field width limit. An overly long ACPI HID string can overflow the fixed-size acpiid buffer on the stack.

This flaw requires the ability to set kernel boot parameters, which typically requires root or physical access. The ivrs_acpihid parameter is used to manually specify ACPI device mappings for AMD IOMMU. Since kernel command-line parameters are controlled at boot time by privileged users, the attack surface is limited to scenarios where an attacker already has elevated access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.