CVE-2023-53019: net: mdio: validate parameter addr in mdiobus_get_phy()
In the Linux kernel, the following vulnerability has been resolved:
net: mdio: validate parameter addr in mdiobusgetphy()
The caller may pass any value as addr, what may result in an out-of-bounds access to array mdiomap. One existing case is stmmacinitphy() that may pass -1 as addr. Therefore validate addr before using it.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53019?
CVE-2023-53019 has been classified as a moderate severity vulnerability.
How do I fix CVE-2023-53019?
To fix CVE-2023-53019, update the Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2023-53019?
CVE-2023-53019 affects various versions of the Linux kernel that utilize the MDIO subsystem.
What are the potential consequences of CVE-2023-53019?
CVE-2023-53019 may lead to out-of-bounds access, which could potentially allow for data leakage or system instability.
Who is responsible for addressing CVE-2023-53019?
System administrators and those managing Linux kernel environments should address CVE-2023-53019 by applying the relevant updates and patches.