CyberRota Analysis
AI-GeneratedThe vulnerability in the Linux kernel affects the `ucs2_strnlen()` function, which can lead to an off-by-one out-of-bounds read if the input string is not properly NUL-terminated within the specified maximum length. This flaw could potentially allow attackers to read sensitive data beyond the intended buffer, posing a risk to system integrity. Linux system administrators and developers should prioritize applying the patch to mitigate this risk and ensure the security of their systems.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() Patch series "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", v2. This series fixes an off-by-one out-of-bounds read in ucs2_strnlen(). The first patch is the real fix, the second patch comes as a bonus and fixes the code indentation. This patch (of 2): ucs2_strnlen() checks the current character before checking whether the caller-provided maximum length has been reached. If the input is not NUL-terminated within that bound, the loop can read one ucs2_char_t past the limit. Test the length before dereferencing to prevent an off-by-one out-of-bounds read.