Not yet scoredPublished Dec 24, 2025

CVE-2023-54056kheaders: Use array declaration instead of char

Updated under an hour ago (Oct 28, 2026, 11:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIG_FORTIFY_SOURCE, memcpy() will check the size of destination and source buffers. Defining kernel_headers_data as "char" would trip this check. Since these addresses are treated as byte arrays, define them as arrays (as done everywhere else). This was seen with: $ cat /sys/kernel/kheaders.tar.xz >> /dev/null detected buffer overflow in memcpy kernel BUG at lib/string_helpers.c:1027! ... RIP: 0010:fortify_panic+0xf/0x20 [...] Call Trace: <TASK> ikheaders_read+0x45/0x50 [kheaders] kernfs_fop_read_iter+0x1a4/0x2f0 ...

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 43d8ce9d65a54846d378545770991e65838981e0 before 719459877d58c8aced5845c1e5b98d8d87d09197; from 43d8ce9d65a54846d378545770991e65838981e0 before fcd2da2e6bf2640a31a2a5b118b50dc3635c707b; 43d8ce9d65a54846d378545770991e65838981e0 builds before 4a07d2d511e2703efd4387891d49e0326f1157f3; from 43d8ce9d65a54846d378545770991e65838981e0 before b9f6845a492de20679b84bda6b08be347c5819da; from 43d8ce9d65a54846d378545770991e65838981e0 before d6d1af6b8611801b585c53c0cc63626c8d339e96; from 43d8ce9d65a54846d378545770991e65838981e0 before 82d2e01b95c439fe55fab5e04fc83387c42d3a48; from 43d8ce9d65a54846d378545770991e65838981e0 before b69edab47f1da8edd8e7bfdf8c70f51a2a5d89fb	CNA record

References

References

https://git.kernel.org/stable/c/719459877d58c8aced5845c1e5b98d8d87d09197
https://git.kernel.org/stable/c/fcd2da2e6bf2640a31a2a5b118b50dc3635c707b
https://git.kernel.org/stable/c/4a07d2d511e2703efd4387891d49e0326f1157f3
https://git.kernel.org/stable/c/b9f6845a492de20679b84bda6b08be347c5819da
https://git.kernel.org/stable/c/d6d1af6b8611801b585c53c0cc63626c8d339e96
https://git.kernel.org/stable/c/82d2e01b95c439fe55fab5e04fc83387c42d3a48
https://git.kernel.org/stable/c/b69edab47f1da8edd8e7bfdf8c70f51a2a5d89fb

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.