PT-2025-49677 · Linux · Linux Kernel
Publicado
2023-08-11
·
Atualizado
2026-03-26
·
CVE-2023-53817
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's crypto/lib/mpi module, specifically within the
mpi cmp ui() function, which can lead to a null pointer dereference. This issue occurs during NVMeTCP Authentication when a controller specifies the 8192-bit Diffie Hellman group and provides a zeroed Diffie Hellman value. The mpi cmp ui() function incorrectly handles this scenario, causing a dereference of the null pointer u->d.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel