by Kastro
Paper/Archive/CVE-2023-52687

CVE-2023-52687

Linux Linux — crypto: safexcel - Add error handling for dma_map_sg() calls

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 48.8.488 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_sg() calls Macro dma_map_sg() may return 0 on error. This patch enables checks in case of the macro failure and ensures unmapping of previously mapped buffers with dma_unmap_sg(). Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.

Affected

ProductAffectedFixed inSource
Linux49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 – < 4c0ac81a172a69a7733290915276672787e904ec4c0ac81a172a69a7733290915276672787e904ecCNA
Linux49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 – < 8084b788c2fb1260f7d44c032d5124680b20d2b28084b788c2fb1260f7d44c032d5124680b20d2b2CNA
Linux49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 – < fc0b785802b856566df3ac943e38a072557001c4fc0b785802b856566df3ac943e38a072557001c4CNA
Linux49186a7d9e46ff132a0ed9b721ad6b6a58dba6c1 – < 87e02063d07708cac5bfe9fd3a6a242898758ac887e02063d07708cac5bfe9fd3a6a242898758ac8CNA
Linux6.16.1.75CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgit.kernel.org/stable/c/4c0ac81a172a69a7733290915276672787e904ecrefgit.kernel.org/stable/c/8084b788c2fb1260f7d44c032d5124680b20d2b2refgit.kernel.org/stable/c/fc0b785802b856566df3ac943e38a072557001c4refgit.kernel.org/stable/c/87e02063d07708cac5bfe9fd3a6a242898758ac8