OpenCVE

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix potential NULL-ptr-dereference in_dev_get() can return NULL which will cause a failure once idev is dereferenced in in_dev_for_each_ifa_rtnl(). This patch adds a check for NULL value in idev beforehand. Found by Linux Verification Center (linuxtesting.org) with SVACE.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/360682fe7df262d94fae54f737c487bec0f9190d
https://git.kernel.org/stable/c/5d9745cead1f121974322b94ceadfb4d1e67960e
https://git.kernel.org/stable/c/8f5fe1cd8e6a97f94840b55f59ed08cbc397086f
https://lore.kernel.org/linux-cve-announce/2024052103-CVE-2023-52744-1e58@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52744
https://www.cve.org/CVERecord?id=CVE-2023-52744

History

Mon, 04 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:23:05.937Z

Updated: 2024-11-04T14:51:52.232Z

Reserved: 2024-05-21T15:19:24.233Z

Link: CVE-2023-52744

Vulnrichment

Updated: 2024-08-02T23:11:35.755Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:14.230

Modified: 2024-11-21T08:40:29.643

Link: CVE-2023-52744

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52744 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52744", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.233Z", "datePublished": "2024-05-21T15:23:05.937Z", "dateUpdated": "2024-11-04T14:51:52.232Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:51:52.232Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix potential NULL-ptr-dereference\n\nin_dev_get() can return NULL which will cause a failure once idev is\ndereferenced in in_dev_for_each_ifa_rtnl(). This patch adds a\ncheck for NULL value in idev beforehand.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/hw/irdma/cm.c"], "versions": [{"version": "146b9756f14c", "lessThan": "8f5fe1cd8e6a", "status": "affected", "versionType": "git"}, {"version": "146b9756f14c", "lessThan": "360682fe7df2", "status": "affected", "versionType": "git"}, {"version": "146b9756f14c", "lessThan": "5d9745cead1f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/hw/irdma/cm.c"], "versions": [{"version": "5.14", "status": "affected"}, {"version": "0", "lessThan": "5.14", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.94", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.12", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/8f5fe1cd8e6a97f94840b55f59ed08cbc397086f"}, {"url": "https://git.kernel.org/stable/c/360682fe7df262d94fae54f737c487bec0f9190d"}, {"url": "https://git.kernel.org/stable/c/5d9745cead1f121974322b94ceadfb4d1e67960e"}], "title": "RDMA/irdma: Fix potential NULL-ptr-dereference", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-17T17:37:02.408361Z", "id": "CVE-2023-52744", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:37:32.925Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.755Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/8f5fe1cd8e6a97f94840b55f59ed08cbc397086f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/360682fe7df262d94fae54f737c487bec0f9190d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5d9745cead1f121974322b94ceadfb4d1e67960e", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/8f5fe1cd8e6a97f94840b55f59ed08cbc397086f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/360682fe7df262d94fae54f737c487bec0f9190d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5d9745cead1f121974322b94ceadfb4d1e67960e", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.755Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52744", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-17T17:37:02.408361Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:37:03.535Z"}}], "cna": {"title": "RDMA/irdma: Fix potential NULL-ptr-dereference", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "146b9756f14c", "lessThan": "8f5fe1cd8e6a", "versionType": "git"}, {"status": "affected", "version": "146b9756f14c", "lessThan": "360682fe7df2", "versionType": "git"}, {"status": "affected", "version": "146b9756f14c", "lessThan": "5d9745cead1f", "versionType": "git"}], "programFiles": ["drivers/infiniband/hw/irdma/cm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.14"}, {"status": "unaffected", "version": "0", "lessThan": "5.14", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.94", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.12", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/infiniband/hw/irdma/cm.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/8f5fe1cd8e6a97f94840b55f59ed08cbc397086f"}, {"url": "https://git.kernel.org/stable/c/360682fe7df262d94fae54f737c487bec0f9190d"}, {"url": "https://git.kernel.org/stable/c/5d9745cead1f121974322b94ceadfb4d1e67960e"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix potential NULL-ptr-dereference\n\nin_dev_get() can return NULL which will cause a failure once idev is\ndereferenced in in_dev_for_each_ifa_rtnl(). This patch adds a\ncheck for NULL value in idev beforehand.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:51:52.232Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52744", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:51:52.232Z", "dateReserved": "2024-05-21T15:19:24.233Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:23:05.937Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}