Linux Kernel Buffer Overflow Vulnerability in dell-wmi-sysman

A buffer overflow vulnerability has been identified in the Linux kernel's dell-wmi-sysman component. This issue arises when the 'buf' array, received from the user, contains an empty string, resulting in a 'length' variable of zero. Accessing the 'buf' array with an index of 'length - 1' leads to a buffer overflow. The vulnerability has been addressed by adding a check for empty strings.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which often allows for arbitrary code execution or causing a denial-of-service condition.