7.8

CVE-2023-53019

net: mdio: validate parameter addr in mdiobus_get_phy()

In the Linux kernel, the following vulnerability has been resolved:

net: mdio: validate parameter addr in mdiobus_get_phy()

The caller may pass any value as addr, what may result in an out-of-bounds
access to array mdio_map. One existing case is stmmac_init_phy() that
may pass -1 as addr. Therefore validate addr before using it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.5 < 4.14.305
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.272
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.231
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.166
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.91
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.9
Linux ≫ Linux Kernel Version6.2 Updaterc1
Linux ≫ Linux Kernel Version6.2 Updaterc2
Linux ≫ Linux Kernel Version6.2 Updaterc3
Linux ≫ Linux Kernel Version6.2 Updaterc4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.082
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://git.kernel.org/stable/c/1d80c259dfbadefa61b7ea334dfce5cb57f8c72f
Patch
https://git.kernel.org/stable/c/c431a3d642593bbdb99e8a9e3eed608b730db6f8
Patch
https://git.kernel.org/stable/c/8a7b9560a3a8eb8724888c426e05926752f73aa0
Patch
https://git.kernel.org/stable/c/4bc5f1f6bc94e695dfd912122af96e7115a0ddb8
Patch
https://git.kernel.org/stable/c/ad67de330d83e8078372b52af18ffe8d39e26c85
Patch
https://git.kernel.org/stable/c/7879626296e6ffd838ae0f2af1ab49ee46354973
Patch
https://git.kernel.org/stable/c/867dbe784c5010a466f00a7d1467c1c5ea569c75
Patch