Linux Kernel ibmvnic Driver Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the Linux kernel's ibmvnic driver. The issue arises when the driver prints hexadecimal dumps of data buffers. If the buffer size is not a multiple of eight bytes, this can lead to a read buffer overflow. The vulnerability has been addressed by creating a new function in the ibmvnic driver that properly handles buffer sizes and uses kernel helpers to safely perform hex dumps. This patch resolves reports from the Kernel Address Sanitizer (KASAN) regarding slab-out-of-bounds errors, which indicated that the driver was reading beyond the allocated memory limits.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, allowing for potential arbitrary code execution or memory corruption.