CVE-2023-52917

In the Linux kernel, the following vulnerability has been resolved: ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() The debugfs_create_dir() function returns error pointers. It never returns NULL. So use IS_ERR() to check it.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/16e5bed6c1883b19f9fcbdff996aa3381954d5f3	Patch
https://git.kernel.org/stable/c/20cbc281033ef5324f67f2d54bc539968f937255
https://git.kernel.org/stable/c/4b2fbba4e44630a59b09d32627b63c4ffdf70f78
https://git.kernel.org/stable/c/7cbd6d7fb9ba2be03978809c848e2e50eaeead2c	Patch
https://git.kernel.org/stable/c/a429158f2e0a7a03eb67fd5e204e1f6735c725aa	Patch
https://git.kernel.org/stable/c/b66bf833e72a1e23d7ccafc0f8f74e80f8c357b5	Patch
https://git.kernel.org/stable/c/babba8595d1e5d57313a6187f3e51aceacc6881a	Patch
https://git.kernel.org/stable/c/e229897d373a87ee09ec5cc4ecd4bb2f895fc16b	Patch
https://git.kernel.org/stable/c/ef7e34237e2612b116a84c9640628a6f7a0d693e	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

08 Nov 2024, 16:15

Type	Values Removed	Values Added
References		() https://git.kernel.org/stable/c/20cbc281033ef5324f67f2d54bc539968f937255 - () https://git.kernel.org/stable/c/4b2fbba4e44630a59b09d32627b63c4ffdf70f78 -

24 Oct 2024, 14:38

Type	Values Removed	Values Added
References	~~() https://git.kernel.org/stable/c/16e5bed6c1883b19f9fcbdff996aa3381954d5f3 -~~	() https://git.kernel.org/stable/c/16e5bed6c1883b19f9fcbdff996aa3381954d5f3 - Patch
References	~~() https://git.kernel.org/stable/c/7cbd6d7fb9ba2be03978809c848e2e50eaeead2c -~~	() https://git.kernel.org/stable/c/7cbd6d7fb9ba2be03978809c848e2e50eaeead2c - Patch
References	~~() https://git.kernel.org/stable/c/a429158f2e0a7a03eb67fd5e204e1f6735c725aa -~~	() https://git.kernel.org/stable/c/a429158f2e0a7a03eb67fd5e204e1f6735c725aa - Patch
References	~~() https://git.kernel.org/stable/c/b66bf833e72a1e23d7ccafc0f8f74e80f8c357b5 -~~	() https://git.kernel.org/stable/c/b66bf833e72a1e23d7ccafc0f8f74e80f8c357b5 - Patch
References	~~() https://git.kernel.org/stable/c/babba8595d1e5d57313a6187f3e51aceacc6881a -~~	() https://git.kernel.org/stable/c/babba8595d1e5d57313a6187f3e51aceacc6881a - Patch
References	~~() https://git.kernel.org/stable/c/e229897d373a87ee09ec5cc4ecd4bb2f895fc16b -~~	() https://git.kernel.org/stable/c/e229897d373a87ee09ec5cc4ecd4bb2f895fc16b - Patch
References	~~() https://git.kernel.org/stable/c/ef7e34237e2612b116a84c9640628a6f7a0d693e -~~	() https://git.kernel.org/stable/c/ef7e34237e2612b116a84c9640628a6f7a0d693e - Patch
Summary		(es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ntb: intel: Corrige el error NULL vs IS_ERR() para debugfs_create_dir() La función debugfs_create_dir() devuelve punteros de error. Nunca devuelve NULL. Por lo tanto, utiliza IS_ERR() para comprobarlo.
CPE		cpe:2.3:o:linux:linux_kernel::::::::
CWE		NVD-CWE-noinfo
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.5
First Time		Linux linux Kernel Linux

21 Oct 2024, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-10-21 13:15

Updated : 2024-11-08 16:15

NVD link : CVE-2023-52917

Mitre link : CVE-2023-52917

CVE.ORG link : CVE-2023-52917

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

5.5 /10