CVE-2023-52868

thermal: core: prevent potential string overflow

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

thermal: core: prevent potential string overflow

The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	203d3d4aa482339b4816f131f713e1b8ee37f6dd to before b55f0a9f865be75ca1019aad331f3225f7b50ce8Affected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 6ad1bf47fbe5750c4d5d8e41337665e193e2c521Affected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 3091ab943dfc7b2578599b0fe203350286fab5bbAffected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 3f795fb35c2d8a637efe76b4518216c9319b998cAffected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 3a8f4e58e1ee707b4f46a1000b40b86ea3dd509cAffected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 77ff34a56b695e228e6daf30ee30be747973d6e8Affected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 0f6b3be28c4d62ef6498133959c72266629bea97Affected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before edbd6bbe40ac524a8f2273ffacc53edf14f3c686Affected 203d3d4aa482339b4816f131f713e1b8ee37f6dd to before c99626092efca3061b387043d4a7399bf75fbdd5Affected
LinuxLinux	2.6.25Affected before 2.6.25Not affected 4.14.330 through 4.14.Not affected 4.19.299 through 4.19.Not affected 5.4.261 through 5.4.Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

203d3d4aa482339b4816f131f713e1b8ee37f6dd to before b55f0a9f865be75ca1019aad331f3225f7b50ce8Affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 6ad1bf47fbe5750c4d5d8e41337665e193e2c521Affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 3091ab943dfc7b2578599b0fe203350286fab5bbAffected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 3f795fb35c2d8a637efe76b4518216c9319b998cAffected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 3a8f4e58e1ee707b4f46a1000b40b86ea3dd509cAffected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 77ff34a56b695e228e6daf30ee30be747973d6e8Affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before 0f6b3be28c4d62ef6498133959c72266629bea97Affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before edbd6bbe40ac524a8f2273ffacc53edf14f3c686Affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd to before c99626092efca3061b387043d4a7399bf75fbdd5Affected

LinuxLinux

2.6.25Affected
before 2.6.25Not affected
4.14.330 through 4.14.*Not affected
4.19.299 through 4.19.*Not affected
5.4.261 through 5.4.*Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.