In the Linux kernel, the following vulnerability has been resolved:
thermal: core: prevent potential string overflow
The dev->id value comes from idaalloc() so it's a number between zero and INTMAX. If it's too high then these sprintf()s will overflow.
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f795fb35c2d8a637efe76b4518216c9319b998c",
"id": "CVE-2023-52868-131e1b1f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "198768772248777249758399391863633293663",
"length": 2748.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_bind_cdev_to_trip"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c99626092efca3061b387043d4a7399bf75fbdd5",
"id": "CVE-2023-52868-1415ee15",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "321106791238456472892371268780900179914",
"length": 2854.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f795fb35c2d8a637efe76b4518216c9319b998c",
"id": "CVE-2023-52868-2003e384",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c",
"id": "CVE-2023-52868-24226857",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "321106791238456472892371268780900179914",
"length": 2854.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ad1bf47fbe5750c4d5d8e41337665e193e2c521",
"id": "CVE-2023-52868-2465a35a",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f6b3be28c4d62ef6498133959c72266629bea97",
"id": "CVE-2023-52868-46a57a04",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "42168029249703595511418481066809367500",
"length": 2746.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c",
"id": "CVE-2023-52868-57aa3478",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55f0a9f865be75ca1019aad331f3225f7b50ce8",
"id": "CVE-2023-52868-5fdf65d8",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "145258362992472303371656046125066530815",
"length": 2806.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f6b3be28c4d62ef6498133959c72266629bea97",
"id": "CVE-2023-52868-63123eb4",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3091ab943dfc7b2578599b0fe203350286fab5bb",
"id": "CVE-2023-52868-65abcf42",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@77ff34a56b695e228e6daf30ee30be747973d6e8",
"id": "CVE-2023-52868-6c74b76a",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "23293804970156671691060668371304634692",
"length": 2923.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b55f0a9f865be75ca1019aad331f3225f7b50ce8",
"id": "CVE-2023-52868-aac339ee",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "243332763448625304599021874201920014382",
"length": 2738.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@77ff34a56b695e228e6daf30ee30be747973d6e8",
"id": "CVE-2023-52868-b2656c45",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "145258362992472303371656046125066530815",
"length": 2806.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@edbd6bbe40ac524a8f2273ffacc53edf14f3c686",
"id": "CVE-2023-52868-c02ba764",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@edbd6bbe40ac524a8f2273ffacc53edf14f3c686",
"id": "CVE-2023-52868-d076653b",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ad1bf47fbe5750c4d5d8e41337665e193e2c521",
"id": "CVE-2023-52868-d167b6a3",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "321106791238456472892371268780900179914",
"length": 2854.0
},
"target": {
"file": "drivers/thermal/thermal_core.c",
"function": "thermal_zone_bind_cooling_device"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3091ab943dfc7b2578599b0fe203350286fab5bb",
"id": "CVE-2023-52868-fbfc2652",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"200157365146573748703919097187328114066",
"184844051251508112577620469971953462066",
"196003478651918051643974684258175068894",
"335598166507389885684791312121536747148",
"95514278570745961013435329837882726833",
"273854553979365217703315618026445224163",
"246431101972864498644649741525354250798",
"146642156085299800439028914518836350424"
]
},
"target": {
"file": "drivers/thermal/thermal_core.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c99626092efca3061b387043d4a7399bf75fbdd5",
"id": "CVE-2023-52868-fd145856",
"deprecated": false,
"signature_version": "v1"
}
]