Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53661

bnxt: avoid overflow in bnxt_get_nvram_directory()

Description

In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow. Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c0c050c58d840994ba842ad1c338a98e7c12b764 to < d5eaf2a6b077f32a477feb1e9e1c1f60605b460eaffected
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to < efb1a257513438d43f4335f09b2f684e8167cad2affected
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to < 17e0453a7523ad7a25bb47af941b150a6c66d7b6affected
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to < 7c6dddc239abe660598c49ec95ea0ed6399a4b2aaffected

Linux Linux

Default version status: affected

  • 4.4affected
  • 0 to < 4.4unaffected
  • 5.15.113 to ≤ 5.15.*unaffected
  • 6.1.30 to ≤ 6.1.*unaffected
  • 6.3.4 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References