IT

Tracker / CVE-2023-53470

CVE-2023-53470

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If devlink_alloc() fails and we try to use devlink_priv() on the NULL return, the kernel gets very unhappy and panics. With this fix, the driver load will still fail, but at least it won't panic the kernel.

Affected products and versions

linux linux_kernel · 5.16 → 6.1.29
linux linux_kernel · 5.4 → 5.15.112
linux linux_kernel · 6.2 → 6.2.16
linux linux_kernel · 6.3 → 6.3.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References