CVE-2023-52976

Description

In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efi_mem_reserve_persistent When iterating on a linked list, a result of memremap is dereferenced without checking it for NULL. This patch adds a check that falls back on allocating a new page in case memremap doesn't succeed. Found by Linux Verification Center (linuxtesting.org) with SVACE. [ardb: return -ENOMEM instead of breaking out of the loop]

Reserved 2025-03-27 | Published 2025-03-27 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

18df7577adae6c6c778bf774b3aebcacbc1fb439 before d92a25627bcdf264183670da73c9a60c0bac327e
affected

18df7577adae6c6c778bf774b3aebcacbc1fb439 before 87d4ff18738fd71e7e3c10827c80257da6283697
affected

18df7577adae6c6c778bf774b3aebcacbc1fb439 before d8fc0b5fb3e816a4a8684bcd3ed02cbef0fce23c
affected

18df7577adae6c6c778bf774b3aebcacbc1fb439 before a2e6a9ff89f13666a1c3ff7195612ab949ea9afc
affected

18df7577adae6c6c778bf774b3aebcacbc1fb439 before 966d47e1f27c45507c5df82b2a2157e5a4fd3909
affected

b5961ecad7121fec138ebee7d9eba4863f9dc6e7
affected

Default status
affected

5.2
affected

Any version before 5.2
unaffected

5.4.232
unaffected

5.10.168
unaffected

5.15.93
unaffected

6.1.11
unaffected

6.2
unaffected

References

git.kernel.org/...c/d92a25627bcdf264183670da73c9a60c0bac327e

git.kernel.org/...c/87d4ff18738fd71e7e3c10827c80257da6283697

git.kernel.org/...c/d8fc0b5fb3e816a4a8684bcd3ed02cbef0fce23c

git.kernel.org/...c/a2e6a9ff89f13666a1c3ff7195612ab949ea9afc

git.kernel.org/...c/966d47e1f27c45507c5df82b2a2157e5a4fd3909

cve.org (CVE-2023-52976)

nvd.nist.gov (CVE-2023-52976)

Download JSON