CVE-2023-54057 — Classic Buffer Overflow in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
Affected Packages4 packages
▶CVEListV5linux/linuxca3bf5d47cec8b7614bcb2e9132c40081d6d81db — 5e97dc748d13fad582136ba0c8cec215c7aeeb17+6
🔴Vulnerability Details
3GHSA▶
GHSA-25gw-vwhh-r379: In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
T↗2025-12-24
OSV▶
CVE-2023-54057: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The↗2025-12-24