In the Linux kernel, the following vulnerability has been resolved:
net: mdio: validate parameter addr in mdiobusgetphy()
The caller may pass any value as addr, what may result in an out-of-bounds access to array mdiomap. One existing case is stmmacinit_phy() that may pass -1 as addr. Therefore validate addr before using it.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@867dbe784c5010a466f00a7d1467c1c5ea569c75",
"id": "CVE-2023-53019-4c0686e1",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c431a3d642593bbdb99e8a9e3eed608b730db6f8",
"id": "CVE-2023-53019-51dcc4a1",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7879626296e6ffd838ae0f2af1ab49ee46354973",
"id": "CVE-2023-53019-5fdce0f9",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7879626296e6ffd838ae0f2af1ab49ee46354973",
"id": "CVE-2023-53019-6b0487cd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad67de330d83e8078372b52af18ffe8d39e26c85",
"id": "CVE-2023-53019-76f1cd12",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d80c259dfbadefa61b7ea334dfce5cb57f8c72f",
"id": "CVE-2023-53019-7b96c218",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bc5f1f6bc94e695dfd912122af96e7115a0ddb8",
"id": "CVE-2023-53019-8665267e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a7b9560a3a8eb8724888c426e05926752f73aa0",
"id": "CVE-2023-53019-8d2b652e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad67de330d83e8078372b52af18ffe8d39e26c85",
"id": "CVE-2023-53019-a34317b4",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bc5f1f6bc94e695dfd912122af96e7115a0ddb8",
"id": "CVE-2023-53019-b261a24f",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d80c259dfbadefa61b7ea334dfce5cb57f8c72f",
"id": "CVE-2023-53019-c180718f",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c431a3d642593bbdb99e8a9e3eed608b730db6f8",
"id": "CVE-2023-53019-dac12f1d",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@867dbe784c5010a466f00a7d1467c1c5ea569c75",
"id": "CVE-2023-53019-e0edd41b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "mdiobus_get_phy",
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"length": 231.0,
"function_hash": "235227204475499124346915317455189622601"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a7b9560a3a8eb8724888c426e05926752f73aa0",
"id": "CVE-2023-53019-e19c5ce1",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/net/phy/mdio_bus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"193127658758672968622275398373373737002",
"30577885846118591819940282469791926567",
"92856366027775393938975823411132697906",
"42862978150382036391696922888610559799"
]
},
"signature_type": "Line"
}
]