Vulnerability in Linux

CVE-2023-54057

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow, because the string specifier in the format string sscanf() has no width limitation. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

EPSS: 0.002 (11.9th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions ca3bf5d47cec8b7614bcb2e9132c40081d6d81db, 4.7, 0

References