CVE-2023-53058
Published: May 6, 2025Last modified: May 6, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | NONE |
| Integrity impact | NONE |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Not affected (6.1.33-r0) |
| 25 LTS | linux-lts | Not affected (6.6.89-r0) | |
| Stream | linux-lts | Fixed (6.6.58-r0) |
References
- https://git.kernel.org/stable/c/1a9853a7437a22fd849347008fb3c85087906b56
- https://git.kernel.org/stable/c/388188fb58bef9e7f3ca4f8970f03d493b66909f
- https://git.kernel.org/stable/c/5eadc80328298ef7beaaf0cd96791667d3b485ca
- https://git.kernel.org/stable/c/640fcdbcf27fc62de9223f958ceb4e897a00e791
- https://git.kernel.org/stable/c/c4c977935b2fc60084b3735737d17a06e7ba1bd0