CVE-2023-52472

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52472
In the Linux kernel, the following vulnerability has been resolved: crypto: rsa - add a check for allocation failure Static checkers insist that the mpi_alloc() allocation can fail so add a check to prevent a NULL dereference. Small allocations like this can't actually fail in current kernels, but adding a check is very simple and makes the static checkers happy.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511 Patch
https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a Patch
https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4 Patch
https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511 Patch
https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a Patch
https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511 - Patch () https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511 - Patch
References () https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a - Patch () https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a - Patch
References () https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4 - Patch () https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4 - Patch

17 Apr 2024, 18:47

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511 - () https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511 - Patch
References () https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a - () https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a - Patch
References () https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4 - () https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: crypto: rsa: agregue una verificación para fallas en la asignación. Los verificadores estáticos insisten en que la asignación mpi_alloc() puede fallar, así que agregue una verificación para evitar una desreferencia NULL. Pequeñas asignaciones como esta en realidad no pueden fallar en los kernels actuales, pero agregar una verificación es muy simple y hace felices a los verificadores estáticos.

26 Feb 2024, 16:27

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-26 16:27

Updated : 2024-11-21 08:39

NVD link : CVE-2023-52472

Mitre link : CVE-2023-52472

CVE.ORG link : CVE-2023-52472

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference