In the Linux kernel, the following vulnerability has been resolved:
net: mdio: validate parameter addr in mdiobusgetphy()
The caller may pass any value as addr, what may result in an out-of-bounds access to array mdiomap. One existing case is stmmacinit_phy() that may pass -1 as addr. Therefore validate addr before using it.
{ "vanir_signatures": [ { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@867dbe784c5010a466f00a7d1467c1c5ea569c75", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-4c0686e1", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c431a3d642593bbdb99e8a9e3eed608b730db6f8", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-51dcc4a1", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7879626296e6ffd838ae0f2af1ab49ee46354973", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-5fdce0f9", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7879626296e6ffd838ae0f2af1ab49ee46354973", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-6b0487cd", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad67de330d83e8078372b52af18ffe8d39e26c85", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-76f1cd12", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d80c259dfbadefa61b7ea334dfce5cb57f8c72f", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-7b96c218", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bc5f1f6bc94e695dfd912122af96e7115a0ddb8", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-8665267e", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a7b9560a3a8eb8724888c426e05926752f73aa0", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-8d2b652e", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad67de330d83e8078372b52af18ffe8d39e26c85", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-a34317b4", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4bc5f1f6bc94e695dfd912122af96e7115a0ddb8", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-b261a24f", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d80c259dfbadefa61b7ea334dfce5cb57f8c72f", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-c180718f", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c431a3d642593bbdb99e8a9e3eed608b730db6f8", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-dac12f1d", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@867dbe784c5010a466f00a7d1467c1c5ea569c75", "signature_type": "Function", "target": { "file": "drivers/net/phy/mdio_bus.c", "function": "mdiobus_get_phy" }, "id": "CVE-2023-53019-e0edd41b", "digest": { "function_hash": "235227204475499124346915317455189622601", "length": 231.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8a7b9560a3a8eb8724888c426e05926752f73aa0", "signature_type": "Line", "target": { "file": "drivers/net/phy/mdio_bus.c" }, "id": "CVE-2023-53019-e19c5ce1", "digest": { "threshold": 0.9, "line_hashes": [ "193127658758672968622275398373373737002", "30577885846118591819940282469791926567", "92856366027775393938975823411132697906", "42862978150382036391696922888610559799" ] }, "deprecated": false, "signature_version": "v1" } ] }