Wind River Support Network

HomeDefectsLIN1019-11050
Fixed

LIN1019-11050 : Security Advisory - linux - CVE-2023-52466

Created: Feb 25, 2024    Updated: Mar 13, 2024
Resolved Date: Mar 13, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

PCI: Avoid potential out-of-bounds read in pci_dev_for_each_resource()

Coverity complains that pointer in the pci_dev_for_each_resource() may be
wrong, i.e., might be used for the out-of-bounds read.

There is no actual issue right now because we have another check afterwards
and the out-of-bounds read is not being performed. In any case it's better
code with this fixed, hence the proposed change.

As Jonas pointed out "It probably makes the code slightly less performant
as res will now be checked for being not NULL (which will always be true),
but I doubt it will be significant (or in any hot paths)."

https://nvd.nist.gov/vuln/detail/CVE-2023-52466
Live chat
Online