Executive Summary

This vulnerability exists in the Linux kernel's thunderbolt component, specifically in the __tb_property_parse_dir() function. The function fails to verify that the sum of content_offset and content_len fits within the block_len when handling the root directory. If the root directory's length is equal to or greater than block_len minus 2, the function's entry loop reads beyond the allocated property block, potentially causing out-of-bounds memory access.

The fix involves adding a bounds check after calculating content_offset and content_len to reject directories whose content would extend past the allocated block.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to out-of-bounds memory reads in the Linux kernel's thunderbolt property parsing code. Such memory access issues can cause system instability, crashes, or potentially be exploited to leak sensitive information or escalate privileges, depending on the context and attacker capabilities.

Useful 0 Not Useful 0