Bug 2266207 (CVE-2023-52465) - CVE-2023-52465 kernel: null pointer dereference in smb2_probe
Summary: CVE-2023-52465 kernel: null pointer dereference in smb2_probe
Keywords:
Status: NEW
Alias: CVE-2023-52465
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2266209
Blocks: 2266208
TreeView+ depends on / blocked
 
Reported: 2024-02-27 04:44 UTC by Rohit Keshri
Modified: 2024-03-17 17:11 UTC (History)
49 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A NULL pointer flaw was found in the Linux kernel. In this flaw, devm_kasprintf and devm_kzalloc return a pointer to dynamically allocated memory, which can be NULL upon failure.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Rohit Keshri 2024-02-27 04:44:17 UTC 
In the Linux kernel, the following vulnerability has been resolved:

power: supply: Fix null pointer dereference in smb2_probe

devm_kasprintf and devm_kzalloc return a pointer to dynamically
allocated memory which can be NULL upon failure.

https://git.kernel.org/stable/c/88f04bc3e737155e13caddf0ba8ed19db87f0212
https://git.kernel.org/stable/c/bd3d2ec447ede9da822addf3960a5f4275e3ae76
https://git.kernel.org/stable/c/e2717302fbc20f148bcda362facee0444b949a3a
Comment 1 Rohit Keshri 2024-02-27 05:01:01 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2266209]
Comment 3 Justin M. Forbes 2024-02-27 19:20:27 UTC 
This was fixed for Fedora with the 6.6.14 stable kernel updates.
Note You need to log in before you can comment on or make changes to this bug.