In the Linux kernel, the following vulnerability has been resolved:
qed/qedsriov: guard against NULL derefs from qediovgetvf_info
We have to make sure that the info returned by the helper is valid before using it.
Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97ea704f39b5ded96f071e98701aa543f6f89683",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-05cde781",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c3b9dd481c3afce9439b29bafe00444cb4406b",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-21f495de",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25143b6a01d0cc5319edd3de22ffa2578b045550",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-2760b746",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bd0037822fd04da13721f77a42ee5a077d4c5fb",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-3c02f3bc",
"signature_type": "Function",
"digest": {
"function_hash": "273205110345713836589079368360228752451",
"length": 1673.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25143b6a01d0cc5319edd3de22ffa2578b045550",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-40d225cc",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c3b9dd481c3afce9439b29bafe00444cb4406b",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-412c8b0a",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bd0037822fd04da13721f77a42ee5a077d4c5fb",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-48f0ebd6",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39c3b9dd481c3afce9439b29bafe00444cb4406b",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-50fedfc4",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42d72c6d1edc9dc09a5d6f6695d257fa9e9cc270",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-65b3185a",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42d72c6d1edc9dc09a5d6f6695d257fa9e9cc270",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-6fa243db",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25143b6a01d0cc5319edd3de22ffa2578b045550",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-7f1b9da4",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7742c08e012eb65405e8304d100641638c5ff882",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-7f2ffee0",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7742c08e012eb65405e8304d100641638c5ff882",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-7fc164b7",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42d72c6d1edc9dc09a5d6f6695d257fa9e9cc270",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-8350628a",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e42d3bde4ec03c863259878dddaef5c351cca7ad",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-847bb834",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bd0037822fd04da13721f77a42ee5a077d4c5fb",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-87f38c80",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"230912860426229980123261849113366392346",
"18960282626497888239152460253625050279",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b224b0cab3a66e93d414825065a2e667a1d28c32",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-9f02ad10",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e42d3bde4ec03c863259878dddaef5c351cca7ad",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-b7f8792b",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7742c08e012eb65405e8304d100641638c5ff882",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-c75d7e93",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b224b0cab3a66e93d414825065a2e667a1d28c32",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_handle_trust_change"
},
"id": "CVE-2023-53066-ceadafad",
"signature_type": "Function",
"digest": {
"function_hash": "293145082235375268937573572002974971351",
"length": 1700.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97ea704f39b5ded96f071e98701aa543f6f89683",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-d6914410",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e42d3bde4ec03c863259878dddaef5c351cca7ad",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c"
},
"id": "CVE-2023-53066-efdd35fd",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"192381505999601710460790287304676706638",
"23417531312787875857406799864680358880",
"247945882944563622497490175976001025011",
"111403523781826596779395559789339271999",
"208507011661460840194143538938842032495",
"134635433831381026291702838240677489601",
"64536680374577790950487068571539627944",
"284161088873460184577007071406170772630"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b224b0cab3a66e93d414825065a2e667a1d28c32",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-f523e8d1",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@97ea704f39b5ded96f071e98701aa543f6f89683",
"target": {
"file": "drivers/net/ethernet/qlogic/qed/qed_sriov.c",
"function": "qed_iov_configure_min_tx_rate"
},
"id": "CVE-2023-53066-ffcac80b",
"signature_type": "Function",
"digest": {
"function_hash": "7911155113200201487037435221655520126",
"length": 438.0
},
"deprecated": false,
"signature_version": "v1"
}
]