Buffer Overflow in Linux Kernel Affecting UBI Driver

CVE-2023-53265

What is CVE-2023-53265?

A vulnerability in the Linux Kernel's UBI driver has been identified that allows an out-of-bounds access due to improper handling of VID header offsets. This can lead to a buffer overflow, potentially allowing unauthorized memory access or corruption. The issue arises when the combination of VID header offset and size exceeds the allocated buffer, triggering a KASAN report indicating a slab-out-of-bounds error. Users must ensure that their kernel versions are updated to mitigate this risk.

References