Buffer Access Vulnerability in Linux Kernel Affects Multiple Systems

CVE-2023-53331

What is CVE-2023-53331?

A vulnerability exists within the Linux kernel related to the pstore/ram module, where improper checks of the buffer size during initialization could lead to access panics. Specifically, the logic does not correctly validate the start position of empty buffers, potentially resulting in out-of-bounds access. This issue is addressed by ensuring the start position is verified against the buffer size, thus preventing future critical errors during write operations.

References