Bug 2266358 (CVE-2023-52470) - CVE-2023-52470 kernel: null-ptr-deref in alloc_workqueue
Summary: CVE-2023-52470 kernel: null-ptr-deref in alloc_workqueue
Keywords:
Status: NEW
Alias: CVE-2023-52470
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2266359
Blocks: 2266208
TreeView+ depends on / blocked
 
Reported: 2024-02-27 16:57 UTC by Rohit Keshri
Modified: 2024-03-17 17:07 UTC (History)
49 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A NULL pointer dereference flaw was found in alloc_workqueue in the Linux Kernel. Check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Rohit Keshri 2024-02-27 16:57:53 UTC 
In the Linux kernel, the following vulnerability has been resolved:

drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()

check the alloc_workqueue return value in radeon_crtc_init()
to avoid null-ptr-deref.

https://git.kernel.org/stable/c/0b813a6a0087451cb702b6eb841f10856f49d088
https://git.kernel.org/stable/c/14bbfaa5df273b26cde6707f6e655585700e6fe1
https://git.kernel.org/stable/c/21b1645660717d6126dd4866c850fcc5c4703a41
https://git.kernel.org/stable/c/57ca7984806d79b38af528de88fd803babf27feb
https://git.kernel.org/stable/c/5d12c5d75f7c78b83a738025947651ec5c95b4d4
https://git.kernel.org/stable/c/7a2464fac80d42f6f8819fed97a553e9c2f43310
https://git.kernel.org/stable/c/c4ff55408187f2595066967047363ca84e76db85
https://git.kernel.org/stable/c/fb2d8bc9b5e55848b8a7c3c028e2ee8d49f28f97
Comment 1 Rohit Keshri 2024-02-27 17:02:14 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2266359]
Comment 3 Justin M. Forbes 2024-02-27 18:38:28 UTC 
This was fixed for Fedora with the 6.6.16 stable kernel updates.
Note You need to log in before you can comment on or make changes to this bug.