First published: Sun Feb 25 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: crypto: rsa - add a check for allocation failure Static checkers insist that the mpi_alloc() allocation can fail so add a check to prevent a NULL dereference. Small allocations like this can't actually fail in current kernels, but adding a check is very simple and makes the static checkers happy.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=6.5.0<6.6.14 | |
Linux Kernel | >=6.7.0<6.7.2 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.123-1 6.1.119-1 6.12.11-1 6.12.12-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-52472 is classified as a medium severity vulnerability affecting the Linux kernel.
To fix CVE-2023-52472, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
CVE-2023-52472 affects Linux systems running kernel versions between 6.5.0 and 6.6.14, as well as versions between 6.7.0 and 6.7.2.
The impact of CVE-2023-52472 can lead to a NULL dereference in the Linux kernel due to allocation failure checks not being performed.
CVE-2023-52472 was addressed by the Linux kernel maintainers to enhance the robustness of the RSA crypto implementation.