CVE-2023-53066

qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

Published: 5/2/2025 Last updated: 5/11/2026 Reserved: 5/2/2025

In the Linux kernel, the following vulnerability has been resolved: qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info We have to make sure that the info returned by the helper is valid before using it. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (29)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes ortools_solvers orun rawlink rawlink-eio rawlink-lwt restricted shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (4)

Product	Vendor	Version
Linux	Linux	n/a
Linux	Linux	n/a
Linux	Linux	unspecified
Linux	Linux	6.0.4

CVE-2023-53066

qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info

Opam packages affected (29)

Products affected (4)

References (16)