In the Linux kernel, the following vulnerability has been resolved:
traceeventshist: add check for return value of 'createhistfield'
Function 'createhistfield' is called recursively at traceeventshist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer dereference.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@886aa449235f478e262bbd5dcdee6ed6bc202949",
"id": "CVE-2023-53005-50e3a989",
"digest": {
"function_hash": "216102912116593757681637504411781082209",
"length": 2499.0
},
"target": {
"function": "create_hist_field",
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@886aa449235f478e262bbd5dcdee6ed6bc202949",
"id": "CVE-2023-53005-69b8b7cc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"9310241052099030068897437189078153446",
"108722981997942991575000617807858931350",
"89099920196404003349827901381438438435",
"318919594073855626018221112059895095509"
]
},
"target": {
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@592ba7116fa620425725ff0972691f352ba3caf6",
"id": "CVE-2023-53005-6e13ddf6",
"digest": {
"threshold": 0.9,
"line_hashes": [
"211506264130775992562339209638695465176",
"227830701133641103031840386444873073870",
"273694934669895997298784652045896122816",
"163618034386634436114000504912026708839"
]
},
"target": {
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31b2414abeaa6de0490e85164badc6dcb1bb8ec9",
"id": "CVE-2023-53005-71018e58",
"digest": {
"threshold": 0.9,
"line_hashes": [
"9310241052099030068897437189078153446",
"108722981997942991575000617807858931350",
"89099920196404003349827901381438438435",
"318919594073855626018221112059895095509"
]
},
"target": {
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31b2414abeaa6de0490e85164badc6dcb1bb8ec9",
"id": "CVE-2023-53005-7e08c3c4",
"digest": {
"function_hash": "216102912116593757681637504411781082209",
"length": 2499.0
},
"target": {
"function": "create_hist_field",
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4e7e81b4fdfcf457daee6b7a61769f62198d840",
"id": "CVE-2023-53005-84013349",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280899016062459142787004167922168306046",
"5779718207866783161167201793791556201",
"51705148887157551987541651128845453987",
"163618034386634436114000504912026708839"
]
},
"target": {
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2d1ada58e7cc100b8d7d6b082d19321ba4a700a",
"id": "CVE-2023-53005-a49c6b2f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"9310241052099030068897437189078153446",
"108722981997942991575000617807858931350",
"89099920196404003349827901381438438435",
"318919594073855626018221112059895095509"
]
},
"target": {
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@592ba7116fa620425725ff0972691f352ba3caf6",
"id": "CVE-2023-53005-bdef818e",
"digest": {
"function_hash": "210585847962930845771939520497733885957",
"length": 2426.0
},
"target": {
"function": "create_hist_field",
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8b152e9150d07a885f95e1fd401fc81af202d9a4",
"id": "CVE-2023-53005-c360bfa1",
"digest": {
"function_hash": "236508362610881555919677139812308930436",
"length": 2822.0
},
"target": {
"function": "create_hist_field",
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8b152e9150d07a885f95e1fd401fc81af202d9a4",
"id": "CVE-2023-53005-cdeb9f15",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280899016062459142787004167922168306046",
"5779718207866783161167201793791556201",
"51705148887157551987541651128845453987",
"163618034386634436114000504912026708839"
]
},
"target": {
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2d1ada58e7cc100b8d7d6b082d19321ba4a700a",
"id": "CVE-2023-53005-d5a1d3bf",
"digest": {
"function_hash": "294868466696680850968892794898991408752",
"length": 2465.0
},
"target": {
"function": "create_hist_field",
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4e7e81b4fdfcf457daee6b7a61769f62198d840",
"id": "CVE-2023-53005-f20404bc",
"digest": {
"function_hash": "236508362610881555919677139812308930436",
"length": 2822.0
},
"target": {
"function": "create_hist_field",
"file": "kernel/trace/trace_events_hist.c"
},
"signature_type": "Function",
"signature_version": "v1"
}
]