CVE-2023-54057
Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow, because the string specifier in the format string sscanf() has no width limitation. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
How to fix
- Linux Linux5e97dc748d13fad582136ba0c8cec215c7aeeb17, f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9, c513043e0afe6a8ba79d00af358655afabb576d2, 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60, 63cd11165e5e0ea2012254c764003eda1f9adb7d, b6b26d86c61c441144c72f842f7469bb686e1211 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < 5e97dc748d13fad582136ba0c8cec215c7aeeb17, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < c513043e0afe6a8ba79d00af358655afabb576d2, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < 63cd11165e5e0ea2012254c764003eda1f9adb7d, ca3bf5d47cec8b7614bcb2e9132c40081d6d81db ≤ v < b6b26d86c61c441144c72f842f7469bb686e1211, 4.7 | 5e97dc748d13fad582136ba0c8cec215c7aeeb17, f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9, c513043e0afe6a8ba79d00af358655afabb576d2, 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60, 63cd11165e5e0ea2012254c764003eda1f9adb7d, b6b26d86c61c441144c72f842f7469bb686e1211 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.