CVE-2023-54039
Description
In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access In the j1939_tp_tx_dat_new() function, an out-of-bounds memory access could occur during the memcpy() operation if the size of skb->cb is larger than the size of struct j1939_sk_buff_cb. This is because the memcpy() operation uses the size of skb->cb, leading to a read beyond the struct j1939_sk_buff_cb. Updated the memcpy() operation to use the size of struct j1939_sk_buff_cb instead of the size of skb->cb. This ensures that the memcpy() operation only reads the memory within the bounds of struct j1939_sk_buff_cb, preventing out-of-bounds memory access. Additionally, add a BUILD_BUG_ON() to check that the size of skb->cb is greater than or equal to the size of struct j1939_sk_buff_cb. This ensures that the skb->cb buffer is large enough to hold the j1939_sk_buff_cb structure. [mkl: rephrase commit message]
How to fix
- Linux Linuxd2136f05690c272dfc9f9d6efcc51d5f53494b33, 70caa596d158a5d84b117f722d58f3ea503a5ba9, 4fe1d9b6231a68ffc91318f57fd8e4982f028cf7, 4c3fb22a6ec68258ee129a2e6b720f43dffc562f, 36befc9aed6202b4a9b906529aea13eacd7e34ff, b45193cb4df556fe6251b285a5ce44046dd36b4a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < d2136f05690c272dfc9f9d6efcc51d5f53494b33, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 70caa596d158a5d84b117f722d58f3ea503a5ba9, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 4fe1d9b6231a68ffc91318f57fd8e4982f028cf7, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 4c3fb22a6ec68258ee129a2e6b720f43dffc562f, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < 36befc9aed6202b4a9b906529aea13eacd7e34ff, 9d71dd0c70099914fcd063135da3c580865e924c ≤ v < b45193cb4df556fe6251b285a5ce44046dd36b4a, 5.4 | d2136f05690c272dfc9f9d6efcc51d5f53494b33, 70caa596d158a5d84b117f722d58f3ea503a5ba9, 4fe1d9b6231a68ffc91318f57fd8e4982f028cf7, 4c3fb22a6ec68258ee129a2e6b720f43dffc562f, 36befc9aed6202b4a9b906529aea13eacd7e34ff, b45193cb4df556fe6251b285a5ce44046dd36b4a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.