CVE-2023-52472: crypto: rsa - add a check for allocation failure
In the Linux kernel, the following vulnerability has been resolved:
crypto: rsa - add a check for allocation failure
Static checkers insist that the mpialloc() allocation can fail so add a check to prevent a NULL dereference. Small allocations like this can't actually fail in current kernels, but adding a check is very simple and makes the static checkers happy.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52472?
CVE-2023-52472 is classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2023-52472?
To fix CVE-2023-52472, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
What types of systems are affected by CVE-2023-52472?
CVE-2023-52472 affects Linux systems running kernel versions between 6.5.0 and 6.6.14, as well as versions between 6.7.0 and 6.7.2.
What is the impact of CVE-2023-52472?
The impact of CVE-2023-52472 can lead to a NULL dereference in the Linux kernel due to allocation failure checks not being performed.
Who is responsible for the CVE-2023-52472 vulnerability?
CVE-2023-52472 was addressed by the Linux kernel maintainers to enhance the robustness of the RSA crypto implementation.