CVE-2023-52472

    Dashboard / Vulnerabilities / CVE-2023-52472

    CVE-2023-52472

    Published: 25 Feb 2024Last Modified: 12 Aug 2026

    Summary: crypto: rsa - add a check for allocation failure

    Details: In the Linux kernel, the following vulnerability has been resolved: crypto: rsa - add a check for allocation failure Static checkers insist that the mpi_alloc() allocation can fail so add a check to prevent a NULL dereference. Small allocations like this can't actually fail in current kernels, but adding a check is very simple and makes the static checkers happy.

    References: https://git.kernel.org/stable/c/2831f4d3bfa68e64c5f83e96688be779c87b3511, https://git.kernel.org/stable/c/95ad8b6879e2e49d02e3bfc0e1fb46421633fe2a, https://git.kernel.org/stable/c/d872ca165cb67112f2841ef9c37d51ef7e63d1e4, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52472.json, https://nvd.nist.gov/vuln/detail/CVE-2023-52472, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6637e11e4ad22ff03183da0dbd36d65c98b81cf7
    Fixed -2831f4d3bfa68e64c5f83e96688be779c87b3511

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-52472 | CVE-DB