In the Linux kernel, the following vulnerability has been resolved:
gsmi: fix null-deref in gsmigetvariable
We can get EFI variables without fetching the attribute, so we must allow for that in gsmi.
commit 859748255b43 ("efi: pstore: Omit efivars caching EFI varstore access layer") added a new get_variable call with attr=NULL, which triggers panic in gsmi.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee5763ef829bd923033510de6d1df7c73f085e4b",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-0d96fe33",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee5763ef829bd923033510de6d1df7c73f085e4b",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-29ed80e6",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6646d769fdb0ce4318ef9afd127f8526d1ca8393",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-3390660d",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae2a9dcc8caa60b1e14671294e5ec902ea5d1dfd",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-3627d922",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6646d769fdb0ce4318ef9afd127f8526d1ca8393",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-3fd59cdc",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32313c11bdc8a02c577abaf865be3664ab30410a",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-451cf06a",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a769b05eeed7accc4019a1ed9799dd72067f1ce8",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-77f1d23f",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb0421d90f916dffe96b4c049ddf01c0c50620d2",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-88e15eb6",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a769b05eeed7accc4019a1ed9799dd72067f1ce8",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-b96dfcba",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae2a9dcc8caa60b1e14671294e5ec902ea5d1dfd",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-deb8bed8",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32313c11bdc8a02c577abaf865be3664ab30410a",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-ee8b73ea",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffef77794fb5f1245c3249b86342bad2299accb5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-fbc7406d",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb0421d90f916dffe96b4c049ddf01c0c50620d2",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-fd4ba8cc",
"target": {
"function": "gsmi_get_variable",
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"length": 1544.0,
"function_hash": "179531324892344206686205100993922746051"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ffef77794fb5f1245c3249b86342bad2299accb5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52893-ff25716f",
"target": {
"file": "drivers/firmware/google/gsmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"243510278481485329353803528870768771091",
"313282018355001268972730425159482892295",
"286006045802686989510134731641625242925",
"112710678882889283952166422107435825478",
"295013554650648970331232526113882563846",
"239784120932064814777773611472041742965"
]
},
"signature_type": "Line"
}
]