In the Linux kernel, the following vulnerability has been resolved:
net: mdio: validate parameter addr in mdiobusgetphy()
The caller may pass any value as addr, what may result in an out-of-bounds access to array mdiomap. One existing case is stmmacinit_phy() that may pass -1 as addr. Therefore validate addr before using it.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53019.json",
"cna_assigner": "Linux"
}