CVE-2023-53470

Add a check for NULL on the alloc return. If devlinkalloc() fails and we try to use devlinkpriv() on the NULL return, the kernel gets very unhappy and panics. With this fix, the driver load will still fail, but at least it won't panic the kernel.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53470.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

df69ba43217d3cf4215c83c0627ce98a26e56e7c

Fixed

c177dd465f5c1e5f242cdb9258826c591c257e9a

Fixed

0d02efe7f25158c93146e3bb827bc7bb3cd5e71a

Fixed

5325f50de5b1433b27dda7ccff5cb7283722a3f1

Fixed

0020c16c8af7f4bc9503a2088fb30793b6771fac

Fixed

4a54903ff68ddb33b6463c94b4eb37fc584ef760

Affected versions

v5.*

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.12

v5.15.13

v5.15.14

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.3

v5.3-rc8

v5.4

v5.4-rc1

v5.4-rc2

v5.4-rc3

v5.4-rc4

v5.4-rc5

v5.4-rc6

v5.4-rc7

v5.4-rc8

v5.5

v5.5-rc1

v5.5-rc2

v5.5-rc3

v5.5-rc4

v5.5-rc5

v5.5-rc6

v5.5-rc7

v5.6

v5.6-rc1

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.3

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.2.1

v6.2.10

v6.2.11

v6.2.12

v6.2.13

v6.2.14

v6.2.15

v6.2.2

v6.2.3

v6.2.4

v6.2.5

v6.2.6

v6.2.7

v6.2.8

v6.2.9

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.3.1

v6.3.2

Database specific

vanir_signatures

[
    {
        "id": "CVE-2023-53470-1108cbb2",
        "signature_version": "v1",
        "digest": {
            "function_hash": "144349061761124075386144595010850882053",
            "length": 141.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c177dd465f5c1e5f242cdb9258826c591c257e9a",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c",
            "function": "ionic_devlink_alloc"
        }
    },
    {
        "id": "CVE-2023-53470-4c03a210",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "132270172808876105534332315787465744089",
                "336118896696605354013367098402914908550",
                "5242997696173550001298649704034819060",
                "231192769359063176670396964574051207140"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0020c16c8af7f4bc9503a2088fb30793b6771fac",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c"
        }
    },
    {
        "id": "CVE-2023-53470-4ca9c5ee",
        "signature_version": "v1",
        "digest": {
            "function_hash": "144349061761124075386144595010850882053",
            "length": 141.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a54903ff68ddb33b6463c94b4eb37fc584ef760",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c",
            "function": "ionic_devlink_alloc"
        }
    },
    {
        "id": "CVE-2023-53470-584ea2fc",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "132270172808876105534332315787465744089",
                "336118896696605354013367098402914908550",
                "5242997696173550001298649704034819060",
                "231192769359063176670396964574051207140"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a54903ff68ddb33b6463c94b4eb37fc584ef760",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c"
        }
    },
    {
        "id": "CVE-2023-53470-602a40e1",
        "signature_version": "v1",
        "digest": {
            "function_hash": "144349061761124075386144595010850882053",
            "length": 141.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d02efe7f25158c93146e3bb827bc7bb3cd5e71a",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c",
            "function": "ionic_devlink_alloc"
        }
    },
    {
        "id": "CVE-2023-53470-6b427125",
        "signature_version": "v1",
        "digest": {
            "function_hash": "144349061761124075386144595010850882053",
            "length": 141.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0020c16c8af7f4bc9503a2088fb30793b6771fac",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c",
            "function": "ionic_devlink_alloc"
        }
    },
    {
        "id": "CVE-2023-53470-89736e4a",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "132270172808876105534332315787465744089",
                "336118896696605354013367098402914908550",
                "5242997696173550001298649704034819060",
                "231192769359063176670396964574051207140"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5325f50de5b1433b27dda7ccff5cb7283722a3f1",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c"
        }
    },
    {
        "id": "CVE-2023-53470-b3b6d1b6",
        "signature_version": "v1",
        "digest": {
            "function_hash": "144349061761124075386144595010850882053",
            "length": 141.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5325f50de5b1433b27dda7ccff5cb7283722a3f1",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c",
            "function": "ionic_devlink_alloc"
        }
    },
    {
        "id": "CVE-2023-53470-d06551c9",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "132270172808876105534332315787465744089",
                "336118896696605354013367098402914908550",
                "5242997696173550001298649704034819060",
                "231192769359063176670396964574051207140"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d02efe7f25158c93146e3bb827bc7bb3cd5e71a",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c"
        }
    },
    {
        "id": "CVE-2023-53470-daab9d17",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "132270172808876105534332315787465744089",
                "336118896696605354013367098402914908550",
                "5242997696173550001298649704034819060",
                "231192769359063176670396964574051207140"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c177dd465f5c1e5f242cdb9258826c591c257e9a",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/pensando/ionic/ionic_devlink.c"
        }
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53470.json"

Git / github.com/gregkh/linux