Description

In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC Limit the free list length to the size of the IO TLB. Transient pool can be smaller than IO_TLB_SEGSIZE, but the free list is initialized with the assumption that the total number of slots is a multiple of IO_TLB_SEGSIZE. As a result, swiotlb_area_find_slots() may allocate slots past the end of a transient IO TLB buffer.

INFO

Published Date :

2024-05-21T15:31:06.319Z

Last Modified :

2025-05-04T07:43:15.723Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2023-52790 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-52790.

URL Resource
https://git.kernel.org/stable/c/53c87e846e335e3c18044c397cc35178163d7827 cve-icon cve-icon
https://git.kernel.org/stable/c/ce7612496a4ba6068bc68aa1fa9d947dadb4ad9b cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052156-CVE-2023-52790-2a4f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52790 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52790 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact