Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53470

ionic: catch failure from devlink_alloc

Description

In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If devlink_alloc() fails and we try to use devlink_priv() on the NULL return, the kernel gets very unhappy and panics. With this fix, the driver load will still fail, but at least it won't panic the kernel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • df69ba43217d3cf4215c83c0627ce98a26e56e7c to < c177dd465f5c1e5f242cdb9258826c591c257e9aaffected
  • df69ba43217d3cf4215c83c0627ce98a26e56e7c to < 0d02efe7f25158c93146e3bb827bc7bb3cd5e71aaffected
  • df69ba43217d3cf4215c83c0627ce98a26e56e7c to < 5325f50de5b1433b27dda7ccff5cb7283722a3f1affected
  • df69ba43217d3cf4215c83c0627ce98a26e56e7c to < 0020c16c8af7f4bc9503a2088fb30793b6771facaffected
  • df69ba43217d3cf4215c83c0627ce98a26e56e7c to < 4a54903ff68ddb33b6463c94b4eb37fc584ef760affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.15.112 to ≤ 5.15.*unaffected
  • 6.1.29 to ≤ 6.1.*unaffected
  • 6.2.16 to ≤ 6.2.*unaffected
  • 6.3.3 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References