Bug 2270091 (CVE-2023-52616)

Summary:	CVE-2023-52616 kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
Product:	[Other] Security Response	Reporter:	Zack Miele <zmiele>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	acaringi, allarkin, aquini, bhu, chwhite, dbohanno, debarbos, dfreiber, drow, dvlasenk, esandeen, ezulian, hkrzesin, jarod, jburrell, jfaracco, jforbes, jlelli, joe.lawrence, jshortt, jstancek, jwyatt, ldoskova, lgoncalv, mleitner, mmilgram, mstowell, nmurray, ptalbert, rparrazo, rrobaina, rvrbovsk, scweaver, sidakwo, sukulkar, tglozar, vkumar, wcosta, williams, wmealing, ycote, ykopkova
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	kernel 5.10.210, kernel 5.15.149, kernel 6.1.79, kernel 6.6.15, kernel 6.7.3, kernel 6.8	Doc Type:	If docs needed, set a value
Doc Text:	A vulnerability was found in the crypto: lib/mpi component of the Linux kernel, where the initialization of the mpi_ec_ctx structure caused crashes due to uncleared fields. This issue occurs when the structure is referenced after being released. It typically triggers during specific calculations, like the Za value for SM2.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2270092
Bug Blocks:	2270105

Description Zack Miele 2024-03-18 13:17:20 UTC

In the Linux kernel, the following vulnerability has been resolved:

crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init

The Linux kernel CVE team has assigned CVE-2023-52616 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/20240318101458.2835626-11-lee@kernel.org/T

Comment 1 Zack Miele 2024-03-18 13:17:54 UTC

Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2270092]

Comment 3 Justin M. Forbes 2024-03-26 16:04:35 UTC

This was fixed for Fedora with the 6.7.3 stable kernel updates.

Comment 6 Alex 2024-06-09 13:26:30 UTC

The result of automatic check (that is developed by Alexander Larkin) for this CVE-2023-52616 is: 	SKIP	No affected files built, so skip this CVE	NO			-	-	unknown (where first YES/NO value means if related sources built).