Riskcovery

CVE-2023-52794

thermal: intel: powerclamp: fix mismatch in get function for max_idle

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: intel: powerclamp: fix mismatch in get function for max_idle

KASAN reported this

[ 444.853098] BUG: KASAN: global-out-of-bounds in param_get_int+0x77/0x90 [ 444.853111] Read of size 4 at addr ffffffffc16c9220 by task cat/2105 ... [ 444.853442] The buggy address belongs to the variable: [ 444.853443] max_idle+0x0/0xffffffffffffcde0 [intel_powerclamp]

There is a mismatch between the param_get_int and the definition of max_idle. Replacing param_get_int with param_get_byte resolves this issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ebf519710218814cf827adbf9111af081344c969 to before 6a3866dbdcf39ac93e98708e6abced511733dc18Affected
  • ebf519710218814cf827adbf9111af081344c969 to before 0a8585281b11e3a0723bba8d8085d61f0b55f37cAffected
  • ebf519710218814cf827adbf9111af081344c969 to before fae633cfb729da2771b5433f6b84ae7e8b4aa5f7Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.