Wind River Support Network

HomeDefectsLIN1021-7133
Acknowledged

LIN1021-7133 : Security Advisory - shim - CVE-2023-40546

Created: Jan 26, 2024    Updated: Jun 16, 2025
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances.

https://nvd.nist.gov/vuln/detail/CVE-2023-40546
Live chat
Online