CVE-2023-52616

Source
https://cve.org/CVERecord?id=CVE-2023-52616
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52616.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52616
Downstream
Related
Published
2024-03-18T10:14:46.066Z
Modified
2026-04-11T12:46:33.399783Z
Summary
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
Details

In the Linux kernel, the following vulnerability has been resolved:

crypto: lib/mpi - Fix unexpected pointer access in mpiecinit

When the mpiecctx structure is initialized, some fields are not cleared, causing a crash when referencing the field when the structure was released. Initially, this issue was ignored because memory for mpiecctx is allocated with the _GFPZERO flag. For example, this error will be triggered when calculating the Za value for SM2 separately.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52616.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d58bb7e55a8a65894cc02f27c3e2bf9403e7c40f
Fixed
0c3687822259a7628c85cd21a3445cbe3c367165
Fixed
2bb86817b33c9d704e127f92b838035a72c315b6
Fixed
bb44477d4506e52785693a39f03cdc6a2c5e8598
Fixed
7ebf812b7019fd2d4d5a7ca45ef4bf3a6f4bda0a
Fixed
7abdfd45a650c714d5ebab564bb1b988f14d9b49
Fixed
ba3c5574203034781ac4231acf117da917efcd2a

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52616.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.0
Fixed
5.10.210
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.149
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.79
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.15
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52616.json"