CVE-2023-52687: crypto: safexcel - Add error handling for dma_map_sg() calls
In the Linux kernel, the following vulnerability has been resolved:
crypto: safexcel - Add error handling for dmamapsg() calls
Macro dmamapsg() may return 0 on error. This patch enables checks in case of the macro failure and ensures unmapping of previously mapped buffers with dmaunmapsg().
Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.21-1Fixed in 6.12.22-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52687?
CVE-2023-52687 has been classified with a severity level that indicates a significant potential for impact if exploited.
How do I fix CVE-2023-52687?
To address CVE-2023-52687, update your Linux kernel to one of the patched versions such as 5.10.223-1 or 6.12.12-1.
What are the affected versions for CVE-2023-52687?
The affected versions for CVE-2023-52687 include various releases of the Linux kernel prior to the specified patched versions.
What components are impacted by CVE-2023-52687?
CVE-2023-52687 specifically impacts the crypto subsystem of the Linux kernel related to safexcel.
Is CVE-2023-52687 being actively exploited?
As of now, there is no public indication that CVE-2023-52687 is being actively exploited in the wild.