In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Prevent null pointer dereference in nvmefcio_getuuid()
The nvmefcfcpop structure describing an AEN operation is initialized with a null request structure pointer. An FC LLDD may make a call to nvmefciogetuuid passing a pointer to an nvmefcfcpreq for an AEN operation.
Add validation of the request structure pointer before dereference.
{ "vanir_signatures": [ { "id": "CVE-2023-52508-08d4d7b5", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "309693328351581074357629123865103569947", "20930456521158632987136812879865519576", "74139636683565535845916752315759069065", "243734629292697695329277715156051499748" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd46b3ac7322baf3772b33b29726e94f98289db7", "target": { "file": "drivers/nvme/host/fc.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2023-52508-475a1086", "signature_type": "Function", "digest": { "function_hash": "272515171815278861864541371425804035224", "length": 212.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be90c9e29dd59b7d19a73297a1590ff3ec1d22ea", "target": { "file": "drivers/nvme/host/fc.c", "function": "nvme_fc_io_getuuid" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2023-52508-5ce55dbc", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "309693328351581074357629123865103569947", "20930456521158632987136812879865519576", "74139636683565535845916752315759069065", "243734629292697695329277715156051499748" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be90c9e29dd59b7d19a73297a1590ff3ec1d22ea", "target": { "file": "drivers/nvme/host/fc.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2023-52508-713e9e64", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "309693328351581074357629123865103569947", "20930456521158632987136812879865519576", "74139636683565535845916752315759069065", "243734629292697695329277715156051499748" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ae5b3a685dc59a8cf7ccfe0e850999ba9727a3c", "target": { "file": "drivers/nvme/host/fc.c" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2023-52508-b76c7c53", "signature_type": "Function", "digest": { "function_hash": "272515171815278861864541371425804035224", "length": 212.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd46b3ac7322baf3772b33b29726e94f98289db7", "target": { "file": "drivers/nvme/host/fc.c", "function": "nvme_fc_io_getuuid" }, "deprecated": false, "signature_version": "v1" }, { "id": "CVE-2023-52508-e64fbc8e", "signature_type": "Function", "digest": { "function_hash": "272515171815278861864541371425804035224", "length": 212.0 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ae5b3a685dc59a8cf7ccfe0e850999ba9727a3c", "target": { "file": "drivers/nvme/host/fc.c", "function": "nvme_fc_io_getuuid" }, "deprecated": false, "signature_version": "v1" } ] }