PT-2024-5636 · Linux+6 · Linux Kernel+6
Chenyuan Yang
·
Published
2024-02-11
·
Updated
2025-03-25
·
CVE-2023-52429
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 6.7.4
Description
The issue is related to the dm table create function in the drivers/md/dm-table.c module of the Linux kernel. It can attempt to allocate more than INT MAX bytes and crash due to a missing check for struct dm ioctl.target count. This can allow an attacker to cause a denial of service.
Recommendations
For Linux kernel versions through 6.7.4, as a temporary workaround, consider disabling the dm table create function until a patch is available. Restrict access to the vulnerable module drivers/md/dm-table.c to minimize the risk of exploitation. Avoid using the
target count variable in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu