CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the CPU hotplug feature, where the states_show() function can overflow a buffer due to improper handling of multiple registered CPU hotplug states. This could potentially lead to memory corruption, which may allow an attacker to execute arbitrary code or crash the system. Linux system administrators and developers working with kernel-level features should prioritize addressing this issue to mitigate potential exploitation risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output states_show() adds CPU hotplug state names into a single sysfs buffer using sprintf(). With enough registered states, this can write past the end of the PAGE_SIZE buffer. Use sysfs_emit_at() so output is bounded.