-

CVE-2023-53335

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()

If get_ep_from_tid() fails to lookup non-NULL value for ep, ep is
dereferenced later regardless of whether it is empty.
This patch adds a simple sanity check to fix the issue.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < 9dca64042d855a24b0bd81ce242e5dc7e939f6eb
Version 944661dd97f4f257cd914fffec7eb80832ff9141
Status affected
Version < 2cfc00e974d75a3aa8155f2660f57d342e1f67ca
Version 944661dd97f4f257cd914fffec7eb80832ff9141
Status affected
Version < 9ddc77eefb2a567b705c3c86ab2ddabe43cadf1b
Version 944661dd97f4f257cd914fffec7eb80832ff9141
Status affected
Version < 283861a4c52c1ea4df3dd1b6fc75a50796ce3524
Version 944661dd97f4f257cd914fffec7eb80832ff9141
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 4.7
Status affected
Version < 4.7
Version 0
Status unaffected
Version <= 5.15.*
Version 5.15.99
Status unaffected
Version <= 6.1.*
Version 6.1.16
Status unaffected
Version <= 6.2.*
Version 6.2.3
Status unaffected
Version <= *
Version 6.3
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.046
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string