CVE-2023-52429

    Dashboard / Vulnerabilities / CVE-2023-52429

    CVE-2023-52429

    Published: 12 Feb 2024Last Modified: 28 Oct 2026

    Summary:

    Details: dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes, and crash, because of a missing check for struct dm_ioctl.target_count.

    References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bd504bcfec41a503b32054da5472904b404341a4, https://lists.fedoraproject.org/archives/list/[email protected]/message/3LZROQAX7Q7LEP4F7WQ3KUZKWCZGFFP2/, https://www.spinics.net/lists/dm-devel/msg56625.html, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52429.json, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3LZROQAX7Q7LEP4F7WQ3KUZKWCZGFFP2/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GS7S3XLTLOUKBXV67LLFZWB3YVFJZHRK/, https://nvd.nist.gov/vuln/detail/CVE-2023-52429, https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html, https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -bd504bcfec41a503b32054da5472904b404341a4

    Affected versions

    v6.8-rc1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High