Linux Kernel MMC Core Buffer Overflow Vulnerability in Sysfs Output Handling

A buffer overflow vulnerability has been identified in the Linux kernel's MMC core, specifically in how the sysfs output is managed. The issue arises because the sprintf() function, which is still in use for sysfs output, is susceptible to buffer overflow. This vulnerability has been addressed by replacing sprintf() with sysfs_emit(), a safer alternative. The vulnerability was discovered by the Linux Verification Center using the SVACE static analysis tool.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which may allow for arbitrary code execution or causing a denial-of-service condition by crashing the system.