CVE-2023-53817

Katalog CVE

CVSS 7.5 · High EPSS 0,51%

Skor CVSS 3.1 7.5 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn value. mpi_cmp_ui() was detecting this if the second parameter was 0, but 1 is passed from dh_is_pubkey_valid(). This causes the null pointer u->d to be dereferenced towards the end of mpi_cmp_ui()

Rincian

Terbit di NVD

9 Desember 2025

Terakhir diubah

4 Agustus 2026

Status NVD

Deferred

CVSS 3.1

7.5 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 41,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0fc7147c694394f8a8cbc19570c6bc918cac0906
• https://git.kernel.org/stable/c/12ac013ad7ff0df066451e825801d805095b3776
• https://git.kernel.org/stable/c/61f5453e9706e99713825594e0c8f9031485fb5f
• https://git.kernel.org/stable/c/67589d247909043e94d2dd5fb590958e0f99d58d
• https://git.kernel.org/stable/c/9e47a758b70167c9301d2b44d2569f86c7796f2d
• https://git.kernel.org/stable/c/ae63e84ffda74267bf7277c38415ba38389229a0
• https://git.kernel.org/stable/c/d3ad023a39f1127dcfd331c562673355dc078650
• https://git.kernel.org/stable/c/fde791e8a96a64ea7b0ad2440e43586447a209c6