dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloctargets) allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52429.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@bd504bcfec41a503b32054da5472904b404341a4",
"digest": {
"line_hashes": [
"208180000226499092525357571383159880585",
"17678487627331962388929601353276095286",
"258036668859659713831681244102109366270",
"236431283288207549825087767883411384208"
],
"threshold": 0.9
},
"id": "CVE-2023-52429-38c0f1f4",
"deprecated": false,
"target": {
"file": "drivers/md/dm-ioctl.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@bd504bcfec41a503b32054da5472904b404341a4",
"digest": {
"function_hash": "30020248856427799370387774787764068498",
"length": 1293.0
},
"id": "CVE-2023-52429-929b3478",
"deprecated": false,
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "copy_params"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@bd504bcfec41a503b32054da5472904b404341a4",
"digest": {
"line_hashes": [
"99476660521161143094708644401416739743",
"24173687535612221691789448892897973159",
"8445282456764062641286107304220419388",
"19905991385951627344908806833695165215",
"241344534529035476493096972943246571366",
"215908307358101974690960818403296922961",
"331744344902781815221999930420614247654",
"99680479791875661159506138253577395242"
],
"threshold": 0.9
},
"id": "CVE-2023-52429-b0d2945f",
"deprecated": false,
"target": {
"file": "drivers/md/dm-table.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@bd504bcfec41a503b32054da5472904b404341a4",
"digest": {
"function_hash": "50866245058259170038364476821700512670",
"length": 565.0
},
"id": "CVE-2023-52429-f97d1b04",
"deprecated": false,
"target": {
"file": "drivers/md/dm-table.c",
"function": "dm_table_create"
}
}
]