CVE-2023-53066

qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

Published: 5/2/2025 Last updated: 5/4/2025 Reserved: 5/2/2025

In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (2)

Product	Vendor	Version
Linux	Linux	10 Version 1709 for 32-bit Systems
Linux	Linux	10 for 32-bit Systems

CVE-2023-53066

qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

Opam packages affected (27)

Products affected (2)

References (8)