In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Prevent null pointer dereference in nvmefcio_getuuid()
The nvmefcfcpop structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvmefciogetuuid passing a pointer to an nvmefcfcpreq for an AEN operation.
Add validation of the request structure pointer before dereference.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52508.json",
"cna_assigner": "Linux"
}[
{
"id": "CVE-2023-52508-475a1086",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be90c9e29dd59b7d19a73297a1590ff3ec1d22ea",
"target": {
"function": "nvme_fc_io_getuuid",
"file": "drivers/nvme/host/fc.c"
},
"digest": {
"length": 212.0,
"function_hash": "272515171815278861864541371425804035224"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52508-5ce55dbc",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be90c9e29dd59b7d19a73297a1590ff3ec1d22ea",
"target": {
"file": "drivers/nvme/host/fc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"309693328351581074357629123865103569947",
"20930456521158632987136812879865519576",
"74139636683565535845916752315759069065",
"243734629292697695329277715156051499748"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52508-713e9e64",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ae5b3a685dc59a8cf7ccfe0e850999ba9727a3c",
"target": {
"file": "drivers/nvme/host/fc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"309693328351581074357629123865103569947",
"20930456521158632987136812879865519576",
"74139636683565535845916752315759069065",
"243734629292697695329277715156051499748"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52508-e64fbc8e",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ae5b3a685dc59a8cf7ccfe0e850999ba9727a3c",
"target": {
"function": "nvme_fc_io_getuuid",
"file": "drivers/nvme/host/fc.c"
},
"digest": {
"length": 212.0,
"function_hash": "272515171815278861864541371425804035224"
},
"signature_type": "Function"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52508.json"