CVE-2023-28772: Buffer Overflow
An issue was discovered in the Linux kernel before 5.13.3. lib/seqbuf.c has a seqbufputmemhex buffer overflow.
Other sources
Linux Kernel is vulnerable to a buffer overflow, caused by improper bounds checking by the seqbufputmemhex function in lib/seqbuf.c. By sending a specially crafted request, a local attacker could overflow a buffer and execute arbitrary code or cause a denial of service on the system.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28772?
CVE-2023-28772 is categorized with a severity that could lead to a buffer overflow vulnerability in the Linux kernel.
How do I fix CVE-2023-28772?
To mitigate CVE-2023-28772, upgrade to the Linux kernel version 5.14 or higher.
Which versions of the Linux kernel are affected by CVE-2023-28772?
CVE-2023-28772 affects Linux kernel versions prior to 5.13.3.
What type of vulnerability is CVE-2023-28772?
CVE-2023-28772 is a buffer overflow vulnerability found in the seq_buf_putmem_hex function.
What libraries are involved in CVE-2023-28772?
The vulnerability CVE-2023-28772 is specifically associated with the lib/seq_buf.c library in the Linux kernel.