Linux Kernel NVMe Subsystem NQN Buffer Overflow Vulnerability

A vulnerability in the Linux kernel's NVMe subsystem has been addressed. The issue arose in the 'nvmet_root_discovery_nqn_store' function, which improperly handled the 'subsysnqn' string as a fixed-size buffer. This oversight allowed for a buffer overflow, as the string is dynamically allocated. The vulnerability has been resolved by creating a new string using 'kstrndup', ensuring proper memory management.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, potentially allowing for arbitrary code execution or causing a denial-of-service condition.