Buffer Overflow Vulnerability in Linux Kernel Affects Broadcom Wireless Devices

CVE-2023-53582

What is CVE-2023-53582?

The Linux kernel has resolved a vulnerability in the brcmfmac driver that can lead to a stack-out-of-bounds read. This situation arises when a buffer, populated with a CLM version string, is not properly null-terminated before being used as an argument in the strreplace() function during device preinitialization. Failure to ensure null-termination could potentially allow for arbitrary reads beyond the allocated buffer size. The issue was identified via a modified syzkaller, emphasizing the importance of robust input validation in kernel modules to enhance overall system security.

References