Linux Kernel Out-of-Bounds Write Vulnerability in IIO Core

A potential out-of-bounds write vulnerability has been identified in the Linux kernel's IIO (Industrial I/O) core. The issue arises because a buffer is allocated for 20 characters, but if a caller writes more than that, the count is truncated to fit the available space. This can lead to out-of-bounds access. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, which may cause memory corruption or allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by writing more than 20 characters to the affected buffer in the IIO core. This can be done through the debugfs interface by exceeding the buffer limit, which will trigger the out-of-bounds write condition.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The patch is available in the Linux kernel stable tree.