Bug 2266364 (CVE-2023-52472) - CVE-2023-52472 kernel: null pointer derefrence in mpi_alloc
Summary: CVE-2023-52472 kernel: null pointer derefrence in mpi_alloc
Keywords:
Status: NEW
Alias: CVE-2023-52472
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2266366
Blocks: 2266208
TreeView+ depends on / blocked
 
Reported: 2024-02-27 17:14 UTC by Rohit Keshri
Modified: 2024-06-17 17:07 UTC (History)
49 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Rohit Keshri 2024-02-27 17:14:50 UTC
In the Linux kernel, the following vulnerability has been resolved:

crypto: rsa - add a check for allocation failure

Static checkers insist that the mpi_alloc() allocation can fail so add
a check to prevent a NULL dereference.  Small allocations like this
can't actually fail in current kernels, but adding a check is very
simple and makes the static checkers happy.

https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511
https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a
https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4

Comment 1 Rohit Keshri 2024-02-27 17:17:07 UTC
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2266366]

Comment 3 Justin M. Forbes 2024-02-27 18:33:41 UTC
This was fixed for Fedora with the 6.6.14 stable kernel updates.


Note You need to log in before you can comment on or make changes to this bug.