« Volver al listado

CVE-2023-54056

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

kheaders: Use array declaration instead of char

Under CONFIG_FORTIFY_SOURCE, memcpy() will check the size of destination and source buffers. Defining kernel_headers_data as "char" would trip this check. Since these addresses are treated as byte arrays, define them as arrays (as done everywhere else).

This was seen with:

Detalles técnicos trazas, registros y código del informe original
  $ cat /sys/kernel/kheaders.tar.xz >> /dev/null

  detected buffer overflow in memcpy
  kernel BUG at lib/string_helpers.c:1027!
  ...
  RIP: 0010:fortify_panic+0xf/0x20
  [...]
  Call Trace:
   <TASK>
   ikheaders_read+0x45/0x50 [kheaders]
   kernfs_fop_read_iter+0x1a4/0x2f0
  ...

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54056",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "719459877d58c8aced5845c1e5b98d8d87d09197",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "fcd2da2e6bf2640a31a2a5b118b50dc3635c707b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "4a07d2d511e2703efd4387891d49e0326f1157f3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "b9f6845a492de20679b84bda6b08be347c5819da",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "d6d1af6b8611801b585c53c0cc63626c8d339e96",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "82d2e01b95c439fe55fab5e04fc83387c42d3a48",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "43d8ce9d65a54846d378545770991e65838981e0",
              "lessThan": "b69edab47f1da8edd8e7bfdf8c70f51a2a5d89fb",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "kernel/kheaders.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.2",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.4.243",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.180",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.111",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.28",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.2.15",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.*"
            },
            {
              "status": "unaffected",
              "version": "6.3.2",
              "versionType": "semver",
              "lessThanOrEqual": "6.3.*"
            },
            {
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "kernel/kheaders.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-24T13:16:07.320",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/4a07d2d511e2703efd4387891d49e0326f1157f3",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/719459877d58c8aced5845c1e5b98d8d87d09197",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/82d2e01b95c439fe55fab5e04fc83387c42d3a48",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b69edab47f1da8edd8e7bfdf8c70f51a2a5d89fb",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b9f6845a492de20679b84bda6b08be347c5819da",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d6d1af6b8611801b585c53c0cc63626c8d339e96",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/fcd2da2e6bf2640a31a2a5b118b50dc3635c707b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nkheaders: Use array declaration instead of char\n\nUnder CONFIG_FORTIFY_SOURCE, memcpy() will check the size of destination\nand source buffers. Defining kernel_headers_data as \"char\" would trip\nthis check. Since these addresses are treated as byte arrays, define\nthem as arrays (as done everywhere else).\n\nThis was seen with:\n\n  $ cat /sys/kernel/kheaders.tar.xz >> /dev/null\n\n  detected buffer overflow in memcpy\n  kernel BUG at lib/string_helpers.c:1027!\n  ...\n  RIP: 0010:fortify_panic+0xf/0x20\n  [...]\n  Call Trace:\n   <TASK>\n   ikheaders_read+0x45/0x50 [kheaders]\n   kernfs_fop_read_iter+0x1a4/0x2f0\n  ..."
    }
  ],
  "lastModified": "2026-06-17T06:46:43.437",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}