Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53332

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() If ipi_send_{mask|single}() is called with an invalid interrupt number, all the local variables there will be NULL. ipi_send_verify() which is invoked from these functions does verify its 'data' parameter, resulting in a kernel oops in irq_data_get_affinity_mask() as the passed NULL pointer gets dereferenced. Add a missing NULL pointer check in ipi_send_verify()... Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3b8e29a82dd16c1f2061e0b955a71cd36eeb061b to < 926aef60ea64cd9becf2829f7388f48dbe8bcb11affected
  • 3b8e29a82dd16c1f2061e0b955a71cd36eeb061b to < 7448c73d64075051f50caed2c62f46553b69ab8aaffected
  • 3b8e29a82dd16c1f2061e0b955a71cd36eeb061b to < feabecaff5902f896531dde90646ca5dfa9d4f7daffected

Linux Linux

Default version status: affected

  • 4.6affected
  • 0 to < 4.6unaffected
  • 6.1.18 to ≤ 6.1.*unaffected
  • 6.2.5 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References