Off-by-One Vulnerability in Linux Kernel Affecting Multiple Versions

CVE-2023-53397

What is CVE-2023-53397?

A vulnerability has been identified in the Linux kernel involving an off-by-one error in the modpost tool, which checks for executable sections of code. The flaw arises from an incorrect comparison that allows for out-of-bounds access in an array. This issue presents a potential risk for system integrity and could be exploited under specific conditions. A fix has been implemented to ensure that the comparison correctly verifies boundaries, thus enhancing the overall security of the kernel.

References