In the Linux kernel, the following vulnerability has been resolved:
fbdev: sisfb: Fix strbuf array overflow
The values of the variables xres and yres are placed in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters and a space if the array contains non-digit characters. Then, when executing sprintf(strbuf, "%ux%ux8", xres, yres); more than 16 bytes will be written to strbuf. It is suggested to increase the size of the strbuf array to 24.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@688872c4ea4a528cd6a057d545c83506b533ee1f",
"deprecated": false,
"id": "CVE-2024-50180-0820dfb9",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@688872c4ea4a528cd6a057d545c83506b533ee1f",
"deprecated": false,
"id": "CVE-2024-50180-433b2882",
"signature_version": "v1",
"digest": {
"length": 1964.0,
"function_hash": "156636404598683491829351629712489787275"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57c4f4db0a194416da237fd09dad9527e00cb587",
"deprecated": false,
"id": "CVE-2024-50180-6cbbeff4",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@889304120ecb2ca30674d89cd4ef15990b6a571c",
"deprecated": false,
"id": "CVE-2024-50180-7256a114",
"signature_version": "v1",
"digest": {
"length": 1964.0,
"function_hash": "156636404598683491829351629712489787275"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@889304120ecb2ca30674d89cd4ef15990b6a571c",
"deprecated": false,
"id": "CVE-2024-50180-72769e16",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57c4f4db0a194416da237fd09dad9527e00cb587",
"deprecated": false,
"id": "CVE-2024-50180-731fa153",
"signature_version": "v1",
"digest": {
"length": 1975.0,
"function_hash": "186991222748515387975623568538580104561"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@433c84c8495008922534c5cafdae6ff970fb3241",
"deprecated": false,
"id": "CVE-2024-50180-79dd507a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@252f147b1826cbb30ae0304cf86b66d3bb12b743",
"deprecated": false,
"id": "CVE-2024-50180-93f9a257",
"signature_version": "v1",
"digest": {
"length": 1975.0,
"function_hash": "186991222748515387975623568538580104561"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@252f147b1826cbb30ae0304cf86b66d3bb12b743",
"deprecated": false,
"id": "CVE-2024-50180-9f133165",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41cf6f26abe4f491b694c54bd1aa2530369b7510",
"deprecated": false,
"id": "CVE-2024-50180-b772ab4f",
"signature_version": "v1",
"digest": {
"length": 1975.0,
"function_hash": "186991222748515387975623568538580104561"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cf14f5a2746c19455ce9cb44341b5527b5e19c3",
"deprecated": false,
"id": "CVE-2024-50180-ba67f544",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9cf14f5a2746c19455ce9cb44341b5527b5e19c3",
"deprecated": false,
"id": "CVE-2024-50180-c05bcd1b",
"signature_version": "v1",
"digest": {
"length": 1964.0,
"function_hash": "156636404598683491829351629712489787275"
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@11c0d49093b82f6c547fd419c41a982d26bdf5ef",
"deprecated": false,
"id": "CVE-2024-50180-d8154d44",
"signature_version": "v1",
"digest": {
"length": 1964.0,
"function_hash": "156636404598683491829351629712489787275"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@11c0d49093b82f6c547fd419c41a982d26bdf5ef",
"deprecated": false,
"id": "CVE-2024-50180-db3cb2a3",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"function": "sisfb_search_mode",
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@433c84c8495008922534c5cafdae6ff970fb3241",
"deprecated": false,
"id": "CVE-2024-50180-e41acf85",
"signature_version": "v1",
"digest": {
"length": 1975.0,
"function_hash": "186991222748515387975623568538580104561"
}
},
{
"signature_type": "Line",
"target": {
"file": "drivers/video/fbdev/sis/sis_main.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41cf6f26abe4f491b694c54bd1aa2530369b7510",
"deprecated": false,
"id": "CVE-2024-50180-f7f7da23",
"signature_version": "v1",
"digest": {
"line_hashes": [
"23128963830126176888964607043259955000",
"32369784069814975623928792378393839550",
"44290104779972254402124017662062836327",
"329923756978286316558290770699111009063"
],
"threshold": 0.9
}
}
]