« List of all CVEs

CVE-2023-4273

Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry

Published: 8/9/2023 Last updated: 11/14/2025 Reserved: 8/9/2023

A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 6 Medium CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (16)

Product Vendor Version
Red Hat Enterprise Linux 9 Red Hat < 10.0.17763.2452
Red Hat Enterprise Linux 9 Red Hat n/a
Red Hat Enterprise Linux 6 Red Hat < 6.1.7601.26321
Red Hat Enterprise Linux 7 Red Hat n/a
Red Hat Enterprise Linux 8 Red Hat < 8.5.2
Red Hat Enterprise Linux 9 Red Hat Ver. 2.11.75 and earlier (Ver. 2.11.x series)
Red Hat Enterprise Linux 9 Red Hat 2011
Red Hat Enterprise Linux 6 Red Hat All versions
Red Hat Enterprise Linux 7 Red Hat < 40077
Red Hat Enterprise Linux 8 Red Hat >=15.3, <15.7.8
Red Hat Enterprise Linux 7 Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat <= 4.0.3
Red Hat Enterprise Linux 8 Red Hat < 10.0.17763.2452
Red Hat Enterprise Linux 9 Red Hat n/a
Red Hat Enterprise Linux 8 Red Hat n/a
Red Hat Enterprise Linux 7 Red Hat < 10.0.14393.5066

References (28)

Credits (2)