QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-52868

Back to search

CVE-2023-52868

Published: May 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow.

VendorProductVersions

Linux

Linux

affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd - < b55f0a9f865be75ca1019aad331f3225f7b50ce8
affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd - < 6ad1bf47fbe5750c4d5d8e41337665e193e2c521
affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd - < 3091ab943dfc7b2578599b0fe203350286fab5bb
affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd - < 3f795fb35c2d8a637efe76b4518216c9319b998c
affected
203d3d4aa482339b4816f131f713e1b8ee37f6dd - < 3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c

+4 more versions

Linux

Linux

affected
2.6.25
unaffected
0 - < 2.6.25
unaffected
4.14.330 - <= 4.14.*
unaffected
4.19.299 - <= 4.19.*
unaffected
5.4.261 - <= 5.4.*

+6 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now