Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52450

perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() Get logical socket id instead of physical id in discover_upi_topology() to avoid out-of-bound access on 'upi = &type->topology[nid][idx];' line that leads to NULL pointer dereference in upi_fill_topology()

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f680b6e6062ef3c944ffc966d685f067958fca33 to < bf1bf09e6b599758851457f3999779622a48d015affected
  • f680b6e6062ef3c944ffc966d685f067958fca33 to < 3d6f4a78b104c65e4256c3776c9949f49a1b459eaffected
  • f680b6e6062ef3c944ffc966d685f067958fca33 to < 1692cf434ba13ee212495b5af795b6a07e986ce4affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.14 to ≤ 6.6.*unaffected
  • 6.7.2 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References