Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53066

qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < 7bd0037822fd04da13721f77a42ee5a077d4c5fbaffected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < 7742c08e012eb65405e8304d100641638c5ff882affected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < 42d72c6d1edc9dc09a5d6f6695d257fa9e9cc270affected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < 39c3b9dd481c3afce9439b29bafe00444cb4406baffected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < e42d3bde4ec03c863259878dddaef5c351cca7adaffected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < 97ea704f39b5ded96f071e98701aa543f6f89683affected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < b224b0cab3a66e93d414825065a2e667a1d28c32affected
  • 733def6a04bf3d2810dd675e1240f8df94d633c3 to < 25143b6a01d0cc5319edd3de22ffa2578b045550affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 4.14.312 to ≤ 4.14.*unaffected
  • 4.19.280 to ≤ 4.19.*unaffected
  • 5.4.240 to ≤ 5.4.*unaffected
  • 5.10.177 to ≤ 5.10.*unaffected
  • 5.15.105 to ≤ 5.15.*unaffected
  • 6.1.22 to ≤ 6.1.*unaffected
  • 6.2.9 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References