Wind River Support Network

HomeDefectsLIN1021-5295

Acknowledged

LIN1021-5295 : Security Advisory - glusterfs - CVE-2023-26253

Created: Feb 22, 2023 Updated: Sep 28, 2024

Resolved Date: Sep 27, 2024

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

CREATE(Triage):(User=admin) CVE-2023-26253 (https://nvd.nist.gov/vuln/detail/CVE-2023-26253)