Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-54056— kheaders: Use array declaration instead of char

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于kheaders将kernel_headers_data定义为char类型，可能导致缓冲区溢出。

AI Predicted 5.5 Difficulty: Trivial EPSS 0.23% · P13

Possible ATT&CK Techniques 1 AI

T1044

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux 43d8ce9d65a54846d378545770991e65838981e0< 719459877d58c8aced5845c1e5b98d8d87d09197 affected
43d8ce9d65a54846d378545770991e65838981e0< fcd2da2e6bf2640a31a2a5b118b50dc3635c707b affected
43d8ce9d65a54846d378545770991e65838981e0< 4a07d2d511e2703efd4387891d49e0326f1157f3 affected
43d8ce9d65a54846d378545770991e65838981e0< b9f6845a492de20679b84bda6b08be347c5819da affected
43d8ce9d65a54846d378545770991e65838981e0< d6d1af6b8611801b585c53c0cc63626c8d339e96 affected
43d8ce9d65a54846d378545770991e65838981e0< 82d2e01b95c439fe55fab5e04fc83387c42d3a48 affected
43d8ce9d65a54846d378545770991e65838981e0< b69edab47f1da8edd8e7bfdf8c70f51a2a5d89fb affected
5.2 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-54056

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
kheaders: Use array declaration instead of char
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIG_FORTIFY_SOURCE, memcpy() will check the size of destination and source buffers. Defining kernel_headers_data as "char" would trip this check. Since these addresses are treated as byte arrays, define them as arrays (as done everywhere else). This was seen with: $ cat /sys/kernel/kheaders.tar.xz >> /dev/null detected buffer overflow in memcpy kernel BUG at lib/string_helpers.c:1027! ... RIP: 0010:fortify_panic+0xf/0x20 [...] Call Trace: <TASK> ikheaders_read+0x45/0x50 [kheaders] kernfs_fop_read_iter+0x1a4/0x2f0 ...
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于kheaders将kernel_headers_data定义为char类型，可能导致缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 43d8ce9d65a54846d378545770991e65838981e0 ~ 719459877d58c8aced5845c1e5b98d8d87d09197 -
Linux Linux 5.2 -

II. Public POCs for CVE-2023-54056

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-54056

请登录查看更多情报信息。

Other References for CVE-2023-54056 (4)

Same Patch Batch · Linux · 2025-12-24 · 322 CVEs total

CVE-2025-68726 9.8 CRITICAL crypto: aead - Fix reqsize handling
CVE-2022-50717 9.8 CRITICAL nvmet-tcp: add bounds check on Transfer Tag
CVE-2025-68745 9.8 CRITICAL scsi: qla2xxx: Clear cmds after chip reset
CVE-2025-68741 9.8 CRITICAL scsi: qla2xxx: Fix improper freeing of purex item
CVE-2023-53867 9.8 CRITICAL ceph: fix potential use-after-free bug when trimming caps
CVE-2023-54090 9.8 CRITICAL ixgbe: Fix panic during XDP_TX with > 64 CPUs
CVE-2023-54076 9.8 CRITICAL smb: client: fix missed ses refcounting
CVE-2025-68359 9.8 CRITICAL btrfs: fix double free of qgroup record after failure to add delayed ref head
CVE-2023-54094 9.8 CRITICAL net: prevent skb corruption on frag list segmentation
CVE-2023-53996 9.3 CRITICAL x86/sev: Make enc_dec_hypercall() accept a size instead of npages
CVE-2023-54060 8.8 HIGH iommufd: Set end correctly when doing batch carry
CVE-2023-54040 8.8 HIGH ice: fix wrong fallback logic for FDIR
CVE-2022-50732 8.8 HIGH staging: rtl8192u: Fix use after free in ieee80211_rx()
CVE-2023-54043 8.8 HIGH iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
CVE-2023-54092 8.8 HIGH KVM: s390: pv: fix index value of replaced ASCE
CVE-2023-54120 8.8 HIGH Bluetooth: Fix race condition in hidp_session_thread
CVE-2025-68736 8.8 HIGH landlock: Fix handling of disconnected directories
CVE-2023-54071 8.8 HIGH wifi: rtw88: use work to update rate to avoid RCU warning
CVE-2023-53986 8.6 HIGH mips: bmips: BCM6358: disable RAC flush for TP1
CVE-2022-50746 8.4 HIGH erofs: validate the extent length for uncompressed pclusters

Showing top 20 of 322 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-54056

No comments yet

Leave a comment