CyberRota Analysis
AI-GeneratedA buffer overflow vulnerability exists in the Linux kernel's cxl/fwctl component, specifically within the cxlctl_get_supported_features() function, which can lead to potential memory corruption. This issue may result in application crashes or unexpected behavior, particularly affecting systems utilizing the CXL (Compute Express Link) framework. Organizations using Linux in environments that leverage CXL should prioritize this fix to mitigate risks associated with system stability and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime assertion in cxlctl_get_supported_features(). Fortify complains that it is potentially overflowing the entries array per __counted_by_le(num_entries). Quiet the false positive by initializing @num_entries earlier. memcpy: detected buffer overflow: 48 byte write of buffer size 0 WARNING: lib/string_helpers.c:1036 at __fortify_report+0x4d/0xa0, CPU#7: fwctl/1398 RIP: 0010:__fortify_report+0x50/0xa0 Call Trace: __fortify_panic+0xd/0xf cxlctl_get_supported_features.cold+0x23/0x35 [cxl_core]