CVEvulnerability

CVE-2023-4273

6.7 MEDIUM Published 2023-08-09 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2023-08-09
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121, CWE-787

Description

A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.

Affected configurations

• linux linux kernel (< 6.4) • linux linux kernel 6.5 • fedoraproject fedora 37 • fedoraproject fedora 38 • redhat enterprise linux 9.0 • debian debian linux 11.0 • debian debian linux 12.0 • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h410s firmware

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References