In the Linux kernel, the following vulnerability has been resolved:
powerpc/powernv: Add a null pointer check to scomdebuginit_one()
kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Add a null pointer check, and release 'ent' to avoid memory leaks.
{ "vanir_signatures": [ { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1eefa93faf69188540b08b024794fa90b1d82e8b", "digest": { "length": 650.0, "function_hash": "244100121787829621977614224660963077189" }, "id": "CVE-2023-52690-14bf863c", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd8422ff271c22058560832fc3006324ded895a9", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "199161185098881269429376090155178121367" ] }, "id": "CVE-2023-52690-18eb5a43", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f84c1446daa552e9699da8d1f8375eac0f65edc7", "digest": { "length": 650.0, "function_hash": "244100121787829621977614224660963077189" }, "id": "CVE-2023-52690-255a212c", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9c05cbb6644a2103c75b6906e9dafb9981ebd13", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "199161185098881269429376090155178121367" ] }, "id": "CVE-2023-52690-2ee0b8ab", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f84c1446daa552e9699da8d1f8375eac0f65edc7", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "253553432426629412606431901438951718043" ] }, "id": "CVE-2023-52690-316bdfe5", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a82c4439b903639e0a1f21990cd399fb0a49c19", "digest": { "length": 650.0, "function_hash": "244100121787829621977614224660963077189" }, "id": "CVE-2023-52690-5e7b6c93", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd8422ff271c22058560832fc3006324ded895a9", "digest": { "length": 661.0, "function_hash": "143185871019016164468642510301892110276" }, "id": "CVE-2023-52690-71040214", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed8d023cfa97b559db58c0e1afdd2eec7a83d8f2", "digest": { "length": 650.0, "function_hash": "244100121787829621977614224660963077189" }, "id": "CVE-2023-52690-72aaf4bd", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a260f2dd827bbc82cc60eb4f4d8c22707d80742", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "199161185098881269429376090155178121367" ] }, "id": "CVE-2023-52690-77c6992d", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9c05cbb6644a2103c75b6906e9dafb9981ebd13", "digest": { "length": 661.0, "function_hash": "143185871019016164468642510301892110276" }, "id": "CVE-2023-52690-795efde1", "deprecated": false, "signature_type": "Function", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1eefa93faf69188540b08b024794fa90b1d82e8b", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "253553432426629412606431901438951718043" ] }, "id": "CVE-2023-52690-8f226040", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a82c4439b903639e0a1f21990cd399fb0a49c19", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "253553432426629412606431901438951718043" ] }, "id": "CVE-2023-52690-a308ba85", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed8d023cfa97b559db58c0e1afdd2eec7a83d8f2", "digest": { "threshold": 0.9, "line_hashes": [ "248340914701634652601406412501977200390", "331062040756453132176824917719771714761", "111318146582109049823061270847120544924", "253553432426629412606431901438951718043" ] }, "id": "CVE-2023-52690-a6eab34e", "deprecated": false, "signature_type": "Line", "signature_version": "v1" }, { "target": { "file": "arch/powerpc/platforms/powernv/opal-xscom.c", "function": "scom_debug_init_one" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9a260f2dd827bbc82cc60eb4f4d8c22707d80742", "digest": { "length": 661.0, "function_hash": "143185871019016164468642510301892110276" }, "id": "CVE-2023-52690-d264e498", "deprecated": false, "signature_type": "Function", "signature_version": "v1" } ] }