5.5

CVE-2023-53044

dm stats: check for and propagate alloc_percpu failure

In the Linux kernel, the following vulnerability has been resolved:

dm stats: check for and propagate alloc_percpu failure

Check alloc_precpu()'s return value and return an error from
dm_stats_init() if it fails. Update alloc_dev() to fail if
dm_stats_init() does.

Otherwise, a NULL pointer dereference will occur in dm_stats_cleanup()
even if dm-stats isn't being actively used.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.12 < 4.14.312
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.280
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.240
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.177
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.105
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.22
Linux ≫ Linux Kernel Version >= 6.2 < 6.2.9
Linux ≫ Linux Kernel Version6.3 Updaterc1
Linux ≫ Linux Kernel Version6.3 Updaterc2
Linux ≫ Linux Kernel Version6.3 Updaterc3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/2287d7b721471a3d58bcd829250336e3cdf1635e
Patch
https://git.kernel.org/stable/c/0d96bd507ed7e7d565b6d53ebd3874686f123b2e
Patch
https://git.kernel.org/stable/c/4a32a9a818a895671bd43e0c40351e60e4e9140b
Patch
https://git.kernel.org/stable/c/c68f08cc745675a17894e1b4a5b5b9700ace6da4
Patch
https://git.kernel.org/stable/c/443c9d522397511a4328dc2ec3c9c63c73049756
Patch
https://git.kernel.org/stable/c/a42180dd361584816bfe15c137b665699b994d90
Patch
https://git.kernel.org/stable/c/5b66e36a3efd24041b7374432bfa4dec2ff01e95
Patch
https://git.kernel.org/stable/c/d3aa3e060c4a80827eb801fc448debc9daa7c46b
Patch