← CVE Intelligence

CVE-2023-53165

udf: Fix uninitialized array access for some pathnames PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical impact is that the name may be prepended a "unification hash" when it is not actually needed but still it is good to fix this.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 484a10f49387e4386bf2708532e75bf78ffea2cb before 008ae78d1e12efa904dc819b1ec83e2bca6b2c56; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before b37f998d357102e8eb0f8eeb33f03fff22e49cbf; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before 3f1368af47acf4d0b2a5fb0d2c0d6919d2234b6d; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before 4503f6fc95d6dee85fb2c54785848799e192c51c; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before 985f9666698960dfc87a106d6314203fa90fda75; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before a6824149809395dfbb5bc36bc7057cc3cb84e56d; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before 4d50988da0db167aed6f38685145cb5cd526c4f8; affected 484a10f49387e4386bf2708532e75bf78ffea2cb before 028f6055c912588e6f72722d89c30b401bbcf013
Linux / Linuxaffected 4.6; unaffected 0 before 4.6; unaffected 4.14.324 through 4.14.*; unaffected 4.19.293 through 4.19.*; unaffected 5.4.255 through 5.4.*; unaffected 5.10.192 through 5.10.*; unaffected 5.15.123 through 5.15.*; unaffected 6.1.42 through 6.1.*; unaffected 6.4.7 through 6.4.*; unaffected 6.5 through *

CWE

No CWE identifiers supplied.

References