Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-53335

RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() If get_ep_from_tid() fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 944661dd97f4f257cd914fffec7eb80832ff9141 to < 9dca64042d855a24b0bd81ce242e5dc7e939f6ebaffected
  • 944661dd97f4f257cd914fffec7eb80832ff9141 to < 2cfc00e974d75a3aa8155f2660f57d342e1f67caaffected
  • 944661dd97f4f257cd914fffec7eb80832ff9141 to < 9ddc77eefb2a567b705c3c86ab2ddabe43cadf1baffected
  • 944661dd97f4f257cd914fffec7eb80832ff9141 to < 283861a4c52c1ea4df3dd1b6fc75a50796ce3524affected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 5.15.99 to ≤ 5.15.*unaffected
  • 6.1.16 to ≤ 6.1.*unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References