The Linux kernel's device-mapper ioctl interface (dm-ioctl) contained a buffer overflow vulnerability in the list_version_get_info function. The code incorrectly used sizeof(tt->version), which is 12 bytes, while writing 16 bytes into the output buffer, specifically writing info->vers->version[0], info->vers->version[1], info->vers->version[2], and info->vers->next. This mismatch could cause a buffer overflow. The vulnerability was fixed by replacing the incorrect size calculation with sizeof(struct dm_target_versions), ensuring the buffer is correctly sized.

This vulnerability could cause a buffer overflow in the kernel, potentially leading to memory corruption. The specific impact depends on how the overflow is triggered and exploited, which is not detailed in the available information. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel by correcting the size calculation in the affected function. Users and administrators should apply the official kernel updates that include this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisories for the official patch and remediation guidance.