Linux Kernel Buffer Overflow Vulnerability in Nvidia Framebuffer Driver

A buffer overflow vulnerability has been identified in the Linux kernel's Nvidia framebuffer (nvidiafb) driver. The issue arises from the use of 'strcpy' to copy names into a fixed-size buffer, potentially allowing for an overflow if the names exceed 48 characters. Although initial concerns suggested a possible overflow, a review of the function's call sites indicated that such an overflow was unlikely. The vulnerability has been addressed by replacing 'strcpy' with 'strscpy', which prevents the overflow by ensuring that the copied string does not exceed the buffer's capacity.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, a common vulnerability that can be exploited to execute arbitrary code or cause a denial-of-service condition.