In the Linux kernel, the following vulnerability has been resolved:
qed/qedsriov: guard against NULL derefs from qediovgetvf_info
We have to make sure that the info returned by the helper is valid before using it.
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53066.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53066.json"
[
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bd0037822fd04da13721f77a42ee5a077d4c5fb",
"id": "CVE-2023-53066-3c02f3bc",
"deprecated": false,
"target": {
"function": "qed_iov_handle_trust_change",
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"signature_version": "v1",
"digest": {
"length": 1673.0,
"function_hash": "273205110345713836589079368360228752451"
}
},
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bd0037822fd04da13721f77a42ee5a077d4c5fb",
"id": "CVE-2023-53066-48f0ebd6",
"deprecated": false,
"target": {
"function": "qed_iov_configure_min_tx_rate",
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"signature_version": "v1",
"digest": {
"length": 438.0,
"function_hash": "7911155113200201487037435221655520126"
}
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bd0037822fd04da13721f77a42ee5a077d4c5fb",
"id": "CVE-2023-53066-87f38c80",
"deprecated": false,
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"signature_version": "v1",
"digest": {
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"230912860426229980123261849113366392346",
"18960282626497888239152460253625050279",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
],
"threshold": 0.9
}
}
]