Wind River Support Network

HomeDefectsLIN1021-5295

Acknowledged

LIN1021-5295 : Security Advisory - glusterfs - CVE-2023-26253

Created: Feb 21, 2023 Updated: Feb 26, 2023

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

CREATE(Triage):(User=admin) CVE-2023-26253 (https://nvd.nist.gov/vuln/detail/CVE-2023-26253)