CVE-2023-52868 - Vulnerability Details - OpenCVE

ReportizFlow

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97
https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb
https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c
https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c
https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521
https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8
https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8
https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5
https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686
https://lore.kernel.org/linux-cve-announce/2024052119-CVE-2023-52868-c2c3@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52868
https://www.cve.org/CVERecord?id=CVE-2023-52868

History

Tue, 05 Nov 2024 08:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:31:58.530Z

Updated: 2024-12-19T08:27:33.006Z

Reserved: 2024-05-21T15:19:24.263Z

Link: CVE-2023-52868

Vulnrichment

Updated: 2024-08-02T23:11:36.044Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:23.673

Modified: 2024-11-21T08:40:45.563

Link: CVE-2023-52868

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52868 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52868", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.263Z", "datePublished": "2024-05-21T15:31:58.530Z", "dateUpdated": "2024-12-19T08:27:33.006Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:27:33.006Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: prevent potential string overflow\n\nThe dev->id value comes from ida_alloc() so it's a number between zero\nand INT_MAX. If it's too high then these sprintf()s will overflow."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/thermal/thermal_core.c"], "versions": [{"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "b55f0a9f865be75ca1019aad331f3225f7b50ce8", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "6ad1bf47fbe5750c4d5d8e41337665e193e2c521", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "3091ab943dfc7b2578599b0fe203350286fab5bb", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "3f795fb35c2d8a637efe76b4518216c9319b998c", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "77ff34a56b695e228e6daf30ee30be747973d6e8", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "0f6b3be28c4d62ef6498133959c72266629bea97", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "edbd6bbe40ac524a8f2273ffacc53edf14f3c686", "status": "affected", "versionType": "git"}, {"version": "203d3d4aa482339b4816f131f713e1b8ee37f6dd", "lessThan": "c99626092efca3061b387043d4a7399bf75fbdd5", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/thermal/thermal_core.c"], "versions": [{"version": "2.6.25", "status": "affected"}, {"version": "0", "lessThan": "2.6.25", "status": "unaffected", "versionType": "semver"}, {"version": "4.14.330", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.299", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.261", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.201", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.139", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.63", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.12", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.2", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8"}, {"url": "https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521"}, {"url": "https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb"}, {"url": "https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c"}, {"url": "https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c"}, {"url": "https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8"}, {"url": "https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97"}, {"url": "https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686"}, {"url": "https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5"}], "title": "thermal: core: prevent potential string overflow", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52868", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-24T19:32:21.368633Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:24:15.357Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.044Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.044Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52868", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-24T19:32:21.368633Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-24T19:32:24.873Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "thermal: core: prevent potential string overflow", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "203d3d4aa482", "lessThan": "b55f0a9f865b", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "6ad1bf47fbe5", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "3091ab943dfc", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "3f795fb35c2d", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "3a8f4e58e1ee", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "77ff34a56b69", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "0f6b3be28c4d", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "edbd6bbe40ac", "versionType": "git"}, {"status": "affected", "version": "203d3d4aa482", "lessThan": "c99626092efc", "versionType": "git"}], "programFiles": ["drivers/thermal/thermal_core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2.6.25"}, {"status": "unaffected", "version": "0", "lessThan": "2.6.25", "versionType": "semver"}, {"status": "unaffected", "version": "4.14.330", "versionType": "semver", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.299", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.261", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.201", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.139", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.63", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.12", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.2", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/thermal/thermal_core.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8"}, {"url": "https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521"}, {"url": "https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb"}, {"url": "https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c"}, {"url": "https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c"}, {"url": "https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8"}, {"url": "https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97"}, {"url": "https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686"}, {"url": "https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: prevent potential string overflow\n\nThe dev->id value comes from ida_alloc() so it's a number between zero\nand INT_MAX. If it's too high then these sprintf()s will overflow."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:54:13.301Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52868", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:54:13.301Z", "dateReserved": "2024-05-21T15:19:24.263Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:31:58.530Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: prevent potential string overflow\n\nThe dev->id value comes from ida_alloc() so it's a number between zero\nand INT_MAX. If it's too high then these sprintf()s will overflow."}, {"lang": "es", "value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: t\u00e9rmica: n\u00facleo: evita un posible desbordamiento de cadenas. El valor dev->id proviene de ida_alloc(), por lo que es un n\u00famero entre cero e INT_MAX. Si es demasiado alto, estos sprintf()s se desbordar\u00e1n."}], "id": "CVE-2023-52868", "lastModified": "2024-11-21T08:40:45.563", "metrics": {}, "published": "2024-05-21T16:15:23.673", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis"}